chore(deps): bump the production-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: esbuild, isomorphic-dompurify and sass.

Updates esbuild from 0.20.2 to 0.21.3

Release notes

Sourced from esbuild's releases.

v0.21.3

• Implement the decorator metadata proposal (#3760)

  This release implements the decorator metadata proposal, which is a sub-proposal of the decorators proposal. Microsoft shipped the decorators proposal in TypeScript 5.0 and the decorator metadata proposal in TypeScript 5.2, so it's important that esbuild also supports both of these features. Here's a quick example:

  // Shim the "Symbol.metadata" symbol
  Symbol.metadata ??= Symbol('Symbol.metadata')
  const track = (_, context) => {
  (context.metadata.names ||= []).push(context.name)
  }
  class Foo {
  @​track foo = 1
  @​track bar = 2
  }
  // Prints ["foo", "bar"]
  console.log(Foo[Symbol.metadata].names)

  ⚠️ WARNING ⚠️

  This proposal has been marked as "stage 3" which means "recommended for implementation". However, it's still a work in progress and isn't a part of JavaScript yet, so keep in mind that any code that uses JavaScript decorator metadata may need to be updated as the feature continues to evolve. If/when that happens, I will update esbuild's implementation to match the specification. I will not be supporting old versions of the specification.

• Fix bundled decorators in derived classes (#3768)

  In certain cases, bundling code that uses decorators in a derived class with a class body that references its own class name could previously generate code that crashes at run-time due to an incorrect variable name. This problem has been fixed. Here is an example of code that was compiled incorrectly before this fix:

  class Foo extends Object {
    @(x => x) foo() {
      return Foo
    }
  }
  console.log(new Foo().foo())

• Fix tsconfig.json files inside symlinked directories (#3767)

  This release fixes an issue with a scenario involving a tsconfig.json file that extends another file from within a symlinked directory that uses the paths feature. In that case, the implicit baseURL value should be based on the real path (i.e. after expanding all symbolic links) instead of the original path. This was already done for other files that esbuild resolves but was not yet done for tsconfig.json because it's special-cased (the regular path resolver can't be used because the information inside tsconfig.json is involved in path resolution). Note that this fix no longer applies if the --preserve-symlinks setting is enabled.

v0.21.2

• Correct this in field and accessor decorators (#3761)

  This release changes the value of this in initializers for class field and accessor decorators from the module-level this value to the appropriate this value for the decorated element (either the class or the instance). It was previously incorrect due to lack of test coverage. Here's an example of a decorator that doesn't work without this change:

  const dec = () => function() { this.bar = true }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.21.3

• Implement the decorator metadata proposal (#3760)

  This release implements the decorator metadata proposal, which is a sub-proposal of the decorators proposal. Microsoft shipped the decorators proposal in TypeScript 5.0 and the decorator metadata proposal in TypeScript 5.2, so it's important that esbuild also supports both of these features. Here's a quick example:

  // Shim the "Symbol.metadata" symbol
  Symbol.metadata ??= Symbol('Symbol.metadata')
  const track = (_, context) => {
  (context.metadata.names ||= []).push(context.name)
  }
  class Foo {
  @​track foo = 1
  @​track bar = 2
  }
  // Prints ["foo", "bar"]
  console.log(Foo[Symbol.metadata].names)

  ⚠️ WARNING ⚠️

  This proposal has been marked as "stage 3" which means "recommended for implementation". However, it's still a work in progress and isn't a part of JavaScript yet, so keep in mind that any code that uses JavaScript decorator metadata may need to be updated as the feature continues to evolve. If/when that happens, I will update esbuild's implementation to match the specification. I will not be supporting old versions of the specification.

• Fix bundled decorators in derived classes (#3768)

  In certain cases, bundling code that uses decorators in a derived class with a class body that references its own class name could previously generate code that crashes at run-time due to an incorrect variable name. This problem has been fixed. Here is an example of code that was compiled incorrectly before this fix:

  class Foo extends Object {
    @(x => x) foo() {
      return Foo
    }
  }
  console.log(new Foo().foo())

• Fix tsconfig.json files inside symlinked directories (#3767)

  This release fixes an issue with a scenario involving a tsconfig.json file that extends another file from within a symlinked directory that uses the paths feature. In that case, the implicit baseURL value should be based on the real path (i.e. after expanding all symbolic links) instead of the original path. This was already done for other files that esbuild resolves but was not yet done for tsconfig.json because it's special-cased (the regular path resolver can't be used because the information inside tsconfig.json is involved in path resolution). Note that this fix no longer applies if the --preserve-symlinks setting is enabled.

0.21.2

• Correct this in field and accessor decorators (#3761)

  This release changes the value of this in initializers for class field and accessor decorators from the module-level this value to the appropriate this value for the decorated element (either the class or the instance). It was previously incorrect due to lack of test coverage. Here's an example of a decorator that doesn't work without this change:

... (truncated)

Commits

• efa3dd2 publish 0.21.3 to npm
• 5e7cf25 fix #3760: implement decorator metadata proposal
• bd0b13b lowering: always propagate class expression names
• 90acd14 explicit bitwise operators for initializer flags
• ba548df move decorator initializer list to after the class
• 66b7c6d fix #3768: bundled decorators in derived classes
• 6e6f15f fix #3767: tsconfig.json files inside symlinks
• b7dcb95 transform: reuse lowerField for auto-accessors
• b24180e publish 0.21.2 to npm
• f82e0ad fix #3761: this in field and accessor decorators
• Additional commits viewable in compare view

Updates isomorphic-dompurify from 2.9.0 to 2.10.0

Release notes

Sourced from isomorphic-dompurify's releases.

Updated dependencies

Changelog

• Updated dompurify.

See the complete changelog for more details.

Release

2.10.0

Commits

• cf2d9f1 Upgraded dependencies. Added some more meta-keywords. Increased version.
• 5b7d3cf Merge pull request #267 from kkomelin/dependabot/npm_and_yarn/dompurify-3.1.3
• c573583 Bump dompurify from 3.1.2 to 3.1.3
• See full diff in compare view

Updates sass from 1.76.0 to 1.77.2

Release notes

Sourced from sass's releases.

Dart Sass 1.77.2

To install Sass 1.77.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Don't emit deprecation warnings for functions and mixins beginning with __.

• Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

• Properly handle the --silence-deprecation flag.

• Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.1

To install Sass 1.77.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Fix a crash that could come up with importers in certain contexts.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.0

To install Sass 1.77.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Don't throw errors for at-rules in keyframe blocks.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.77.2

• Don't emit deprecation warnings for functions and mixins beginning with __.

• Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

• Properly handle the --silence-deprecation flag.

• Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

1.77.1

• Fix a crash that could come up with importers in certain contexts.

1.77.0

• Don't throw errors for at-rules in keyframe blocks.

Commits

• 5121eb1 Don't treat underscores as hyphens for the purpose of error checking (#2247)
• bdc08fd Merge pull request #2246 from sass/deprecation-cli
• 9a9e483 Add a test to ensure the sass_api dartdoc version matches sass
• 8c48a01 Expand dartdoc range for sass_api to match sass
• c9f0d3f Fix deprecation flags in the CLI and add tests
• 54a6dec Bump lints from 3.0.0 to 4.0.0 (#2242)
• 372f15c Fix MapExtensions.getOption() for nullable types (#2241)
• 85f39d5 Allow at-rules in @keyframes blocks (#2236)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[netlify]

✅ Deploy Preview for triviaccessibility ready!

Name	Link
🔨 Latest commit	5fb8b1c
🔍 Latest deploy log	https://app.netlify.com/sites/triviaccessibility/deploys/664adbfe1a6a0f0008aeff60
😎 Deploy Preview	https://deploy-preview-202--triviaccessibility.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[dependabot]

Superseded by #204.