Sourced from mocha's releases.

v7.1.0

7.1.0 / 2020-02-26

:tada: Enhancements

#4038: Add Node.js native ESM support (@giltayar)

Mocha supports writing your test files as ES modules:

• Node.js only v12.11.0 and above
• Node.js below v13.2.0, you must set --experimental-modules option
• current limitations: please check our documentation
• for programmatic usage: see API: loadFilesAsync()

Note: Node.JS native ECMAScript Modules implementation has status: Stability: 1 - Experimental

:bug: Fixes

• #4181: Programmatic API cannot access retried test objects (@juergba)
• #4174: Browser: fix allowUncaught option (@juergba)

:book: Documentation

• #4058: Manage author list in AUTHORS instead of package.json (@outsideris)

:nut_and_bolt: Other

• #4138: Upgrade ESLint v6.8 (@kaicataldo)

Sourced from mocha's changelog.

7.1.0 / 2020-02-26

:tada: Enhancements

#4038: Add Node.js native ESM support (@giltayar)

Mocha supports writing your test files as ES modules:

• Node.js only v12.11.0 and above
• Node.js below v13.2.0, you must set --experimental-modules option
• current limitations: please check our documentation
• for programmatic usage: see API: loadFilesAsync()

Note: Node.JS native ECMAScript Modules implementation has status: Stability: 1 - Experimental

:bug: Fixes

• #4181: Programmatic API cannot access retried test objects (@juergba)
• #4174: Browser: fix allowUncaught option (@juergba)

:book: Documentation

• #4058: Manage author list in AUTHORS instead of package.json (@outsideris)

:nut_and_bolt: Other

• #4138: Upgrade ESLint v6.8 (@kaicataldo)

• 09b948b Release v7.1.0
• d43092e update CHANGELOG for v7.1.0 [ci skip]
• 57be455 Add support for Node.JS native ES modules (#4038)
• a995e33 Fix: programmatic API cannot access retried test objects (#4181)
• ac12f2c Browser: fix 'allowUncaught' handling (#4174)
• 2ff1cb2 uncaughtException: refactor, move and add tests
• b431609 docs: update browser options
• 883ae4b ESLint: use 'const' instead of 'let'
• 2a1b637 Upgrade: ESLint v6.8 (#4138)
• dbba276 Manage author list in AUTHORS instead of package.json (#4058)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from yargs's releases.

yargs v15.3.1

Bug Fixes

• __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team. (63810ca)

Sourced from yargs's changelog.

15.3.1 (2020-03-16)

Bug Fixes

• __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team. (63810ca)

• 16b44c5 chore: release 15.3.1 (#1592)
• 2474c38 fix: proto will now be replaced with proto in parse (#1591)
• 2fed2a7 chore: fix bin path
• 2b1ab69 build: fix bug with coveralls workflow (#1584)
• adab927 build: continue running coveralls on master (#1583)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from redis's releases.

v3.0.0

This version is mainly a release to distribute all the unreleased changes on master since 2017 and additionally removes a lot of old deprecated features and internals in preparation for an upcoming modernization refactor (v4).

Breaking Changes

• Dropped support for Node.js < 6
• Dropped support for hiredis (no longer required)
• Removed previously deprecated drain event
• Removed previously deprecated idle event
• Removed previously deprecated parser option
• Removed previously deprecated max_delay option
• Removed previously deprecated max_attempts option
• Removed previously deprecated socket_no_delay option

Bug Fixes

• Removed development files from published package (#1370)
• Duplicate function now allows db param to be passed (#1311)

Features

• Upgraded to latest redis-commands package
• Upgraded to latest redis-parser package, v3.0.0, which brings performance improvements
• Replaced double-ended-queue with denque, which brings performance improvements
• Add timestamps to debug traces
• Add socket_initial_delay option for socket.setKeepAlive (#1396)
• Add support for rediss protocol in url (#1282)

Sourced from redis's changelog.

Changelog

v3.0.0 - 09 Feb, 2020

This version is mainly a release to distribute all the unreleased changes on master since 2017 and additionally removes a lot of old deprecated features and old internals in preparation for an upcoming modernization refactor (v4).

Breaking Changes

• Dropped support for Node.js < 6
• Dropped support for hiredis (no longer required)
• Removed previously deprecated drain event
• Removed previously deprecated idle event
• Removed previously deprecated parser option
• Removed previously deprecated max_delay option
• Removed previously deprecated max_attempts option
• Removed previously deprecated socket_no_delay option

Bug Fixes

• Removed development files from published package (#1370)
• Duplicate function now allows db param to be passed (#1311)

Features

• Upgraded to latest redis-commands package
• Upgraded to latest redis-parser package, v3.0.0, which brings performance improvements
• Replaced double-ended-queue with denque, which brings performance improvements
• Add timestamps to debug traces
• Add socket_initial_delay option for socket.setKeepAlive (#1396)
• Add support for rediss protocol in url (#1282)

• 61318e6 3.0.2
• da31ade tests: improve coverage & fix unreachable code branches
• 43bc8df Merge pull request #1496 from NodeRedis/@salakar/travis-windows
• 4623cec docs: update readme to remove unused badge
• 176bfc2 tests: add comments about travis windows issue workaround
• 9f01198 chore: try workaround travis windows hanging issue
• a7149e3 chore: update travis config
• a6af0c2 chore: update travis config
• 46246be chore: disable stop-writes-on-bgsave-error on windows (otherwise MISCONF er...
• 377db61 chore: remove appveyor
• Additional commits viewable in compare view

This version was pushed to npm by salakar, a new releaser for redis since your current version.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from mocha's releases.

v7.1.1

7.1.1 / 2020-03-18

:lock: Security Fixes

• #4204: Update dependencies mkdirp, yargs-parser and yargs (@juergba)

:bug: Fixes

• #3660: Fix runner listening to start and end events (@juergba)

:book: Documentation

• #4190: Show Netlify badge on footer (@outsideris)

Sourced from mocha's changelog.

7.1.1 / 2020-03-18

:lock: Security Fixes

• #4204: Update dependencies mkdirp, yargs-parser and yargs (@juergba)

:bug: Fixes

• #3660: Fix runner listening to start and end events (@juergba)

:book: Documentation

• #4190: Show Netlify badge on footer (@outsideris)

• 7c09e63 Release v7.1.1
• 7599535 update CHANGELOG for v7.1.1 [ci skip]
• 3bf650c security: update mkdirp, yargs, yargs-parser (#4204)
• e1389ef Fix: runner listening to 'start' and 'end' events (#3660)
• 9cbb6f6 upgrade assetgraph-builder
• 4dc3cd1 docs: show netlify badge on footer (#4190)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from typescript's releases.

TypeScript 3.8.3

For release notes, check out the release announcement.

For new features, check out the What's new in TypeScript v3.8.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript v3.8.0 (Beta).
• fixed issues query for Typescript v3.8.1 (RC).
• fixed issues query for Typescript v3.8.2 (Final).
• fixed issues query for Typescript v3.8.3.

Downloads are available on:

• npm

• 712967b Bump version to 3.8.3 and LKG
• d876564 Cherry-pick #37064 into release-3.8 (#37096)
• 963c1f0 Cherry picks 36880 into 3.8 (#37082)
• 80a84c3 Cherry-pick PR #37010 into release-3.8 (#37072)
• 6def346 Allow --composite false or --composite null on the command line (#36997) (#37...
• 9bf6058 Cherry-pick PR #37059 into release-3.8 (#37060)
• 622c206 Ignore data- props when excess property checking (#36952) (#37031)
• c6866c1 Cherry-pick PR #37021 into release-3.8 (#37025)
• d76a45a Cherry-pick PR #36993 into release-3.8 (#37020)
• 98fc075 Cherry-pick PR #36996 into release-3.8 (#37002)
• See full diff in compare view

This version was pushed to npm by typescript-bot, a new releaser for typescript since your current version.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from The GitHub Security Advisory Database.

Path reaversal in url-parse url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.

Affected versions: < 1.5.0

• ad44493 [dist] 1.5.3
• c798461 [fix] Fix host parsing for file URLs (#210)
• 201034b [dist] 1.5.2
• 2d9ac2c [fix] Sanitize only special URLs (#209)
• fb128af [fix] Use 'null' as origin for non special URLs
• fed6d9e [fix] Add a leading slash only if the URL is special
• 94872e7 [fix] Do not incorrectly set the slashes property to true
• 81ab967 [fix] Ignore slashes after the protocol for special URLs
• ee22050 [ci] Use GitHub Actions
• d2979b5 [fix] Special case the file: protocol (#204)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from core-js's changelog.

3.16.0 - 2021.07.30

• Array find from last proposal moved to the stage 3, July 2021 TC39 meeting
• Array filtering stage 1 proposal:
  • Array.prototype.filterReject replaces Array.prototype.filterOut
  • %TypedArray%.prototype.filterReject replaces %TypedArray%.prototype.filterOut
• Added Array grouping stage 1 proposal:
  • Array.prototype.groupBy
  • %TypedArray%.prototype.groupBy
• Work with symbols made stricter: some missed before cases of methods that should throw an error on symbols now works as they should
• Handling @@toPrimitive in some cases of ToPrimitive internal logic made stricter
• Fixed work of Request with polyfilled URLSearchParams, #965
• Fixed possible exposing of collections elements metadata in some cases, #427
• Fixed crashing of Object.create(null) on WSH, #966
• Fixed some cases of typed arrays subclassing logic
• Fixed a minor bug related to string conversion in RegExp#exec
• Fixed Date.prototype.getYear feature detection
• Fixed content of some entry points
• Some minor optimizations and refactoring
• Deno:
  • Added Deno support (sure, after bundling since Deno does not support CommonJS)
  • Allowed deno target in core-js-compat / core-js-builder
  • A bundle for Deno published on deno.land/x/corejs
• Added / updated compat data / mapping:
  • Deno 1.0-1.13
  • NodeJS up to 16.6
  • iOS Safari up to 15.0
  • Samsung Internet up to 15.0
  • Opera Android up to 64
  • Object.hasOwn marked as supported from V8 9.3 and FF92
  • Date.prototype.getYear marked as not supported in IE8-
• Added summary option to core-js-builder, see more info in the README, #910

3.15.2 - 2021.06.29

• Worked around breakage related to zone.js loaded before core-js, #953
• Added NodeJS 16.4 -> Chrome 91 compat data mapping

3.15.1 - 2021.06.23

• Fixed cloning of regex through RegExp constructor, #948

3.15.0 - 2021.06.21

• Added RegExp named capture groups polyfill, #521, #944
• Added RegExp dotAll flag polyfill, #792, #944
• Added missed polyfills of Annex B features (required mainly for some non-browser engines), #336, #945:
  • escape
  • unescape
  • String.prototype.substr
  • Date.prototype.getYear
  • Date.prototype.setYear
  • Date.prototype.toGMTString
• Fixed detection of forbidden host code points in URL polyfill

... (truncated)

• 89686ea 3.16.0
• 70dc9b3 update dependencies
• 26af5cc some stylistic fixes
• c59ec15 add NodeJS 16.6 compat data mapping
• 92eb5dd fix content of some entry points
• ba97391 disable Symbol constructor throws on symbol argument test
• 22c8126 fix a typo
• 7ac3900 fix a typo
• ac93365 Merge pull request #959 from zloirock/array-grouping
• 0784656 IE10 fix
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from fp-ts's releases.

2.11.1

• Deprecation
  • Array
    • deprecate range, use NonEmptyArray module instead.
  • function
    • deprecate Endomorphism, use Endomorphism module instead.
    • deprecate getEndomorphismMonoid, use Endomorphism module instead.
    • deprecate Predicate, use Predicate module instead.
    • deprecate not, use Predicate module instead.
    • deprecate Refinement, use Refinement module instead.
  • Monoid
    • deprecate monoidVoid, use void module instead.
  • NonEmptyArray
    • deprecate groupSort (it's just sort followed by group)
  • Option
    • deprecate getRefinement, use Refinement module instead.
    • deprecate getFirstMonoid, use getMonoid module instead.
    • deprecate getLastMonoid, use getMonoid module instead.
  • ReadonlyArray
    • deprecate range, use ReadonlyNonEmptyArray module instead.
  • ReadonlyNonEmptyArray
    • deprecate groupSort (it's just sort followed by group)
  • Record / ReadonlyRecord: deprecate overloads without Ord constraint (@​anthonyjoeseph):
    • collect
    • reduce
    • foldMap
    • reduceRight
    • reduceWithIndex
    • foldMapWithIndex
    • reduceRightWithIndex
    • getShow
    • deprecate Foldable in favour of getFoldable (@​anthonyjoeseph)
    • deprecate FoldableWithIndex in favour of getFoldableWithIndex (@​anthonyjoeseph)
    • deprecate Traversable in favour of getTraversable (@​anthonyjoeseph)
    • deprecate TraversableWithIndex in favour of getTraversableWithIndex (@​anthonyjoeseph)
    • deprecate Witherable in favour of getWitherable (@​anthonyjoeseph)
  • Semigroup
    • deprecate semigroupVoid, use void module instead.
• New Feature
  • add Endomorphism module
  • add Predicate module
  • add Refinement module
  • add FromState module
  • add FromThese module
  • add void module
  • add FromReader module
  • add NaturalTransformation module
  • add Zero module
  • Alt
    • add altAll

... (truncated)

Sourced from fp-ts's changelog.

2.11.1

• Deprecation
  • Array
    • deprecate range, use NonEmptyArray module instead.
  • function
    • deprecate Endomorphism, use Endomorphism module instead.
    • deprecate getEndomorphismMonoid, use Endomorphism module instead.
    • deprecate Predicate, use Predicate module instead.
    • deprecate not, use Predicate module instead.
    • deprecate Refinement, use Refinement module instead.
  • Monoid
    • deprecate monoidVoid, use void module instead.
  • NonEmptyArray
    • deprecate groupSort (it's just sort followed by group)
  • Option
    • deprecate getRefinement, use Refinement module instead.
    • deprecate getFirstMonoid, use getMonoid module instead.
    • deprecate getLastMonoid, use getMonoid module instead.
  • ReadonlyArray
    • deprecate range, use ReadonlyNonEmptyArray module instead.
  • ReadonlyNonEmptyArray
    • deprecate groupSort (it's just sort followed by group)
  • Record / ReadonlyRecord: deprecate overloads without Ord constraint (@​anthonyjoeseph):
    • collect
    • reduce
    • foldMap
    • reduceRight
    • reduceWithIndex
    • foldMapWithIndex
    • reduceRightWithIndex
    • getShow
    • deprecate Foldable in favour of getFoldable (@​anthonyjoeseph)
    • deprecate FoldableWithIndex in favour of getFoldableWithIndex (@​anthonyjoeseph)
    • deprecate Traversable in favour of getTraversable (@​anthonyjoeseph)
    • deprecate TraversableWithIndex in favour of getTraversableWithIndex (@​anthonyjoeseph)
    • deprecate Witherable in favour of getWitherable (@​anthonyjoeseph)
  • Semigroup
    • deprecate semigroupVoid, use void module instead.
• New Feature
  • add Endomorphism module
  • add Predicate module
  • add Refinement module
  • add FromState module
  • add FromThese module
  • add void module
  • add FromReader module
  • add NaturalTransformation module
  • add Zero module
  • Alt

... (truncated)

• 5a80970 version 2.11.1
• 508cd9a struct: alias _.hasOwnProperty to _.has for evolve
• 60250b9 Merge pull request #1538 from gcanti/2.11
• c6839aa version 2.11
• 781030d update docs
• 45faa77 Merge branch 'master' into 2.11
• 4c65b44 fix: Name Reader variable correct in promap type signature
• c0944c0 Update FP chat invitation link
• 4a3e450 fix links
• b65d48a add new line between notes
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Sourced from mocha's releases.

v9.0.3

9.0.3 / 2021-07-25

:bug: Fixes

• #4702: Error rethrow from cwd-relative path while loading .mocharc.js (@​kirill-golovan)

• #4688: Usage of custom interface in parallel mode (@​juergba)

• #4687: ESM: don't swallow MODULE_NOT_FOUND errors in case of type:module (@​giltayar)

v9.0.2

9.0.2 / 2021-07-03

:bug: Fixes

• #4668: ESM: make --require <dir> work with new import-first loading (@​giltayar)

:nut_and_bolt: Other

• #4674: Update production dependencies (@​juergba)

v9.0.1

9.0.1 / 2021-06-18

:nut_and_bolt: Other

• #4657: Browser: add separate bundle for modern browsers (@​juergba)

We added a separate browser bundle mocha-es2018.js in javascript ES2018, as we skipped the transpilation down to ES5. This is an experimental step towards freezing Mocha's support of IE11.

• #4653: ESM: proper version check in hasStableEsmImplementation (@​alexander-fenster)

v9.0.0

9.0.0 / 2021-06-07

:boom: Breaking Changes

• #4633: Drop Node.js v10.x support (@​juergba)

• #4635: import-first loading of test files (@​giltayar)

Mocha is going ESM-first! This means that it will now use ESM import(test_file) to load the test files, instead of the CommonJS require(test_file). This is not a problem, as import can also load most files that require does. In the rare cases where this fails, it will fallback to require(...). This ESM-first approach is the next step in Mocha's ESM migration, and allows ESM loaders to load and transform the test file.

• #4636: Remove deprecated utils.lookupFiles() (@​juergba)

• #4638: Limit the size of actual/expected for diff generation (@​juergba)

• #4389: Refactoring: Consuming log-symbols alternate to code for win32 in reporters/base (@​MoonSupport)

... (truncated)

Sourced from mocha's changelog.

9.0.3 / 2021-07-25

:bug: Fixes

• #4702: Error rethrow from cwd-relative path while loading .mocharc.js (@​kirill-golovan)

• #4688: Usage of custom interface in parallel mode (@​juergba)

• #4687: ESM: don't swallow MODULE_NOT_FOUND errors in case of type:module (@​giltayar)

9.0.2 / 2021-07-03

:bug: Fixes

• #4668: ESM: make --require <dir> work with new import-first loading (@​giltayar)

:nut_and_bolt: Other

• #4674: Update production dependencies (@​juergba)

9.0.1 / 2021-06-18

:nut_and_bolt: Other

• #4657: Browser: add separate bundle for modern browsers (@​juergba)

We added a separate browser bundle mocha-es2018.js in javascript ES2018, as we skipped the transpilation down to ES5. This is an experimental step towards freezing Mocha's support of IE11.

• #4653: ESM: proper version check in hasStableEsmImplementation (@​alexander-fenster)

9.0.0 / 2021-06-07

:boom: Breaking Changes

• #4633: Drop Node.js v10.x support (@​juergba)

• #4635: import-first loading of test files (@​giltayar)

Mocha is going ESM-first! This means that it will now use ESM import(test_file) to load the test files, instead of the CommonJS require(test_file). This is not a problem, as import can also load most files that require does. In the rare cases where this fails, it will fallback to require(...). This ESM-first approach is the next step in Mocha's ESM migration, and allows ESM loaders to load and transform the test file.

• #4636: Remove deprecated utils.lookupFiles() (@​juergba)

• #4638: Limit the size of actual/expected for diff generation (@​juergba)

• #4389: Refactoring: Consuming log-symbols alternate to code for win32 in reporters/base (@​MoonSupport)

:tada: Enhancements

• #4640: Add new option --dry-run (@​juergba)

... (truncated)

• e044ef0 Release v9.0.3
• 8907601 update CHANGELOG for v9.0.3 [ci skip]
• 7313890 Fix exception rethrow from js config file (#4702)
• 3722201 Fix: using custom interface in parallel mode (#4688)
• 6830821 ESM: fix swallowing MODULE_NOT_FOUND errors in case of type:module (#4687)
• 5c59da0 Release v9.0.2
• 0ce3528 update CHANGELOG for v9.0.2 [ci skip]
• ff51a77 Update production dependencies (#4674)
• 21cda3e Make "-r <dir>" work with new import-first loading (#4668)
• f033ff1 Fix: karma-mocha should run both browser bundles (#4663)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)