目录
dependabot[bot]

Bump svgo from 2.8.2 to 2.8.3 in /website (#153)

Summary: Bumps svgo from 2.8.2 to 2.8.3.

Release notes

Sourced from svgo's releases.

v2.8.3

What's Changed

Security

Support

SVGO v2 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v2 to v3 and Migration Guide from v3 to v4 which should ease the process.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don’t alter it yourself. You can also trigger a rebase manually by commenting dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • dependabot rebase will rebase this PR
  • dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Pull Request resolved: https://github.com/facebook/dotslash/pull/153

Reviewed By: bigfootjon

Differential Revision: D113304833

fbshipit-source-id: 46a1fdffca46271c115ab8160a9ee24de509d3f2

4天前513次提交
quot;RUSTFLAGS=($env.RUSTFLAGS)" cargo test --quiet running 49 tests ................................................. test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s running 44 tests ............................................ test result: ok. 44 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.07s ❯ devcontainer exec --workspace-folder . cargo clippy --quiet -- $env.RUSTFLAGS ❯ ``` Pull Request resolved: https://github.com/facebook/dotslash/pull/144 Reviewed By: bigfootjon Differential Revision: D109112264 fbshipit-source-id: b0a8eccc7117be1dc0fdcb62325ce5026d460cf2 " href="/mirrors/dotslash/commits/4ee8baca61">Improve default permissions for raw artifacts (#144)1个月前
  • tests
  • quot;RUSTFLAGS=($env.RUSTFLAGS)" cargo test --quiet running 49 tests ................................................. test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s running 44 tests ............................................ test result: ok. 44 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.07s ❯ devcontainer exec --workspace-folder . cargo clippy --quiet -- $env.RUSTFLAGS ❯ ``` Pull Request resolved: https://github.com/facebook/dotslash/pull/144 Reviewed By: bigfootjon Differential Revision: D109112264 fbshipit-source-id: b0a8eccc7117be1dc0fdcb62325ce5026d460cf2 " href="/mirrors/dotslash/commits/4ee8baca61">Improve default permissions for raw artifacts (#144)1个月前
  • websiteBump svgo from 2.8.2 to 2.8.3 in /website (#153)4天前
  • windows_shimwindows-sys: enable WindowsFilteringPlatform + Authorization25天前
  • .gitignoreAdd Python package (#87)9个月前
  • CHANGELOG.mddotslash_oss: Publish 0.5.9 (#126)4个月前
  • CODE_OF_CONDUCT.mdInitial commit2年前
  • CONTRIBUTING.mdRevert CONTRIBUTING.md change from D1016851003个月前
  • Cargo.lockBump clap_builder 4.6.0 -> 4.6.29天前
  • Cargo.tomlBump liblzma 0.4.6 -> 0.4.722天前
  • JustfileAdd Python package (#87)9个月前
  • LICENSE-APACHEInitial commit2年前
  • LICENSE-MITInitial commit2年前
  • README.mdUse jsonc for README dotslash file code block2年前
  • DotSlash: simplified executable deployment

    License Build Status

    DotSlash (dotslash) is a command-line tool that lets you represent a set of platform-specific, heavyweight executables with an equivalent small, easy-to-read text file. In turn, this makes it efficient to store executables in source control without hurting repository size. This paves the way for checking build toolchains and other tools directly into the repo, reducing dependencies on the host environment and thereby facilitating reproducible builds.

    We will illustrate this with an example taken from the DotSlash website. Traditionally, if you want to vendor a specific version of Node.js into your project and you want to support both macOS and Linux, you likely need at least two binaries (one for macOS and one for Linux) as well as a shell script like this:

    #!/bin/bash
    
    # Copied from https://stackoverflow.com/a/246128.
    DIR="$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )"
    
    if [ "$(uname)" == "Darwin" ]; then
      # In this example, assume node-mac-v18.16.0 is a universal macOS binary.
      "$DIR/node-mac-v18.16.0" "$@"
    else
      "$DIR/node-linux-v18.16.0" "$@"
    fi
    
    exit $?

    With DotSlash, the shell script and the binaries can be replaced with a single file named node:

    #!/usr/bin/env dotslash
    
    // The URLs in this file were taken from https://nodejs.org/dist/v18.19.0/
    
    {
      "name": "node-v18.19.0",
      "platforms": {
        "macos-aarch64": {
          "size": 40660307,
          "hash": "blake3",
          "digest": "6e2ca33951e586e7670016dd9e503d028454bf9249d5ff556347c3d98c347c34",
          "format": "tar.gz",
          "path": "node-v18.19.0-darwin-arm64/bin/node",
          "providers": [
            {
              "url": "https://nodejs.org/dist/v18.19.0/node-v18.19.0-darwin-arm64.tar.gz"
            }
          ]
        },
        // Note that with DotSlash, it is straightforward to specify separate
        // binaries for different platforms, such as x86 vs. arm64 on macOS.
        "macos-x86_64": {
          "size": 42202872,
          "hash": "blake3",
          "digest": "37521058114e7f71e0de3fe8042c8fa7908305e9115488c6c29b514f9cd2a24c",
          "format": "tar.gz",
          "path": "node-v18.19.0-darwin-x64/bin/node",
          "providers": [
            {
              "url": "https://nodejs.org/dist/v18.19.0/node-v18.19.0-darwin-x64.tar.gz"
            }
          ]
        },
        "linux-x86_64": {
          "size": 44694523,
          "hash": "blake3",
          "digest": "72b81fc3a30b7bedc1a09a3fafc4478a1b02e5ebf0ad04ea15d23b3e9dc89212",
          "format": "tar.gz",
          "path": "node-v18.19.0-linux-x64/bin/node",
          "providers": [
            {
              "url": "https://nodejs.org/dist/v18.19.0/node-v18.19.0-linux-x64.tar.gz"
            }
          ]
        }
      }
    }

    Assuming dotslash is on your $PATH and you remembered to chmod +x node to mark it as executable, you can now run your Node.js wrapper exactly as you did before:

    $ ./node --version
    v18.16.0

    The first time you run ./node --version, you will likely experience a small delay while DotSlash fetches, decompresses, and verifies the appropriate .tar.gz, but subsequent invocations should be instantaneous.

    To understand what is happening under the hood, read the article on how DotSlash works.

    Installing DotSlash

    See the installation instructions on the DotSlash website.

    License

    DotSlash is licensed under both the MIT license and Apache-2.0 license; the exact terms can be found in the LICENSE-MIT and LICENSE-APACHE files, respectively.

    邀请码
      Gitlink(确实开源)
    • 加入我们
    • 官网邮箱:gitlink@ccf.org.cn
    • QQ群
    • QQ群
    • 公众号
    • 公众号

    版权所有:中国计算机学会技术支持:开源发展技术委员会
    京ICP备13000930号-9 京公网安备 11010802047560号