目录
dependabot[bot]

Bump colord from 2.9.2 to 2.10.0 in /documentation/website (#41)

Summary: Bumps colord from 2.9.2 to 2.10.0.

Release notes

Sourced from colord's releases.

v2.10 (RGB color mixing)

  • mix, tints, shades and tones (mix plugin) now accept an optional interpolation color space. LAB stays the default; pass "rgb" to interpolate RGB channels instead — the way browsers and design tools (such as Figma) composite translucent layers.
import { colord, extend } from "colord";
import mixPlugin from "colord/plugins/mix";

extend([mixPlugin]);

colord("#ff0000").mix("#ffffff", 0.5, "rgb").toHex(); // "#ff8080" colord("#f0f3f1").mix("#007d40", 0.14, "rgb").toHex(); // "#cee2d8" — same as compositing rgba(0, 125, 64, 0.14) over #f0f3f1 colord("#ff0000").tints(3, "rgb").map((c) => c.toHex()); // ["#ff0000", "#ff8080", "#ffffff"]

Changelog

Sourced from colord's changelog.

2.10.0

  • Improve mix plugin by adding an optional "rgb" interpolation mode to mix, tints, tones and shades

2.9.7

  • Make HEX parsing and serialization more than 2x faster

2.9.6

  • Fix: Rotate the unrounded hue so rotate and harmonies preserve the original color
  • Fix: Normalize HWB whiteness + blackness over 100% to gray ❤️ @​spokodev

2.9.5

Both fixes change returned numbers for a small set of colors; toHex() output is unchanged. Snapshots holding h: 360, "hsl(360, …)" or a delta() value may need updating.

2.9.4

  • Fix: Reject malformed color strings in linear time ❤️ @​GAP-dev

2.9.3

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don’t alter it yourself. You can also trigger a rebase manually by commenting dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • dependabot rebase will rebase this PR
  • dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Pull Request resolved: https://github.com/facebook/Pysa/pull/41

Reviewed By: tianhan0

Differential Revision: D119666722

Pulled By: arthaud

fbshipit-source-id: efd9d74ed695da6fdb22942f5d6885febce955f7

3天前21078次提交

tests License: MIT

Pysa is a security-focused static analysis tool for Python that tracks data flows to find security and privacy issues — for example, user-controlled input reaching a dangerous sink such as remote code execution or SQL injection. Pysa can analyze codebases with millions of lines of code. Refer to our documentation to get started.

Pysa relies on type information from Pyrefly, Meta’s performant Python type checker.

Pysa is also available on the GitHub Marketplace as a GitHub Action.

Installation

Pysa requires Python 3.9 or later. Install it with pip:

$ pip install pyre-check

Pysa is currently distributed as part of the pyre-check package, since it was historically bundled with Pyre, Meta’s (deprecated) type checker. In the future, Pysa will ship as its own PyPI package.

Running Pysa

Pysa relies on type information from Pyrefly. Before running Pysa, make sure Pyrefly can successfully check your code:

$ pyrefly check

Once Pyrefly runs cleanly, run Pysa from your project directory to find security and privacy issues:

$ pyre analyze

Pysa uses models to identify sources of taint (where untrusted data enters) and sinks (dangerous operations). For details on configuring Pysa, writing models, and interpreting results, see the Pysa documentation.

Join the Pysa community

See CONTRIBUTING.md for how to help out.

License

Pysa is licensed under the MIT license.

邀请码
    Gitlink(确实开源)
  • 加入我们
  • 官网邮箱:gitlink@ccf.org.cn
  • QQ群
  • QQ群
  • 公众号
  • 公众号

版权所有:中国计算机学会技术支持:开源发展技术委员会
京ICP备13000930号-9 京公网安备 11010802047560号