Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade lighthouse from 5.1.0 to 5.6.0 #13

Merged
merged 2 commits into from
Mar 21, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade lighthouse from 5.1.0 to 5.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 5 months ago, on 2019-10-17.
Release notes
Package name: lighthouse
  • 5.6.0 - 2019-10-17

    Full Changelog

    We expect this release to ship in the DevTools of Chrome 79.

    New contributors!

    Thanks to @dpacassi, @lirantal and @yeonjuan for their first contributions!

    Notable

    • gather: add new MainDocumentContent public artifact (#9781)
    • stack-packs: add angular, react, amp, and magento packs (#9797)

    Core

    • tracehouse: allow child to start <1ms before parent (#9786)
    • driver: fix error handling for Runtime.evaluate (#9831)
    • errors-in-console: add ignoredPatterns option (#9480, #9829)
    • image-elements: cache naturalSize results (#9818)
    • link-elements: ignore non-HTMLLinkElements (#9765)
    • optimized-images: log errors (#9782)
    • seo: support korean in link-text audit (#9804)
    • tracehouse: allow nested trace events without an end (#9785)
    • rename Element to LHElement (#9832)

    Deps

    • update third-party-web to 0.11.0 (#9849)
    • snyk: update snyk snapshot (#9793)

    Report

    • rephrase titles for 3rdparty & crc (#9419)
    • rewrite dom-size description (#9821)
    • update logo in top bar (#9728)
    • remove some dead code (#9800)

    Clients

    • lr: don't include html report assets in bundle (#9828)
    • viewer: minify inlined report-generator bundle (#9596)

    I18n

    • import: web.dev links and small corrections (#9846)
    • import translations (#9802)

    Docs

    • related-projects: add lighthouse-check (#9753)
    • related-projects: add the is-website-vulnerable CLI tool (#9810)
    • related-projects: add the gradle lighthouse plugin (#9789)
    • document 'meaning' field in i18n readme (#9787)
    • update stale references to audits (#9760)

    Tests

    • use firehouse smoke test runner to test bundle (#9791)
    • attempt bundle test three times in CI (#9830)
    • smokehouse: fix tmp directory creation (#9855)
    • smokehouse: use static requires for test definitions (#9501)

    Misc

    • build: minify report javascript for lightrider report generator (#9823)
    • more releasing tweaks (#9772)
    • add compare-timings script (#9723, #9776)
  • 5.5.0 - 2019-10-02

    5.5.0 (2019-10-02)

    Notable changes

    • Preliminary implementation of the Largest Contentful Paint metric has landed (devtools and provided throttling only) and can be found in the hidden metrics audit in the raw LHR JSON (#9706)
    • The creation of main-thread tasks from a trace is now more robust. This should significantly reduce the occurrence of Issue #7764, "Fatal trace logic error - expected start event, got X" (#9491)
    • <script> element id has been added to the ScriptElements artifact (#9718)

    New contributors!

    Thanks to @LarsKumbier, @TimvdLippe, and @uchoudh for their first contributions!

    Core

    • network-recorder: remove quic-request-finished workaround (#9744)
    • network-recorder: optimize network idle detection (#9712)
    • unused-css-rules: no more infinity savings (#9731)

    Clients

    • devtools: expose registerLocaleData to worker (#9645)
    • devtools: update references to Runtime.cachedResources (#9758)

    Docs

    • new documentation for running Lighthouse on authenticated pages (#9628, #9705)
    • point more docs links to web.dev (#9540, #9711, #9761)
    • readme: add more related projects (#9716, #9743)
    • releasing: add schedule, more integration testing (#9695)
    • add links to more info about throttling and variability (#9734)
    • update scoring calculator link to v5 (#9729)

    Tests

    • add Lighthouse CI dogfood script to travis (#9677, #9745)
    • report: update utm_medium check for web.dev links (#9737)
    • smokehouse: add check for any runWarnings (#9732)
    • attempt to download lantern test trace set a few times (#9766)

    Misc

    • devtools: remove version replacement for expectations (#9702)
    • remove unnecessary return in Promise (#9703)
    • assets: update logo (#9694)

    Full Changelog

  • 5.4.0 - 2019-09-19

    5.4.0 (2019-09-18)

    Expected DevTools release in Chrome 79 (December 2019)

    Core

    • iframe-elements: Include new IFrameElements gatherer (#8979)

    Report

    Docs

    • plugins: update recipe's lighthouse peerDependency version (#9653)

    I18n

    • treat Infinity and NaN as numeric values (#9687)

    Tests

    • smokehouse: fix unintentional 404, relax max-len (#9665)
  • 5.3.0 - 2019-09-16

    5.3.0 (2019-09-16)

    Expected DevTools release in Chrome 79 (December 2019)

    New contributors!

    Thanks to our new contributors @alabiaga, @olore, @letanure, and @mfriesenhahn!

    Core

    • point audit descriptions to new web.dev Lighthouse docs (#9538, #9539, #9084, #9537)
    • constants: increase default maxWaitForFcp to 30s (#9509)
    • font-size: gather style declaration of type attributes (#9414)
    • gather-runner: only fail on interstitials interrupting the mainRecord (#9576)
    • lightwallet: add path property to budget.json (#9453)
    • seo: support portuguese in link-text audit (#9446)
    • start-url: stay offline for entirety of offlinePass (#9451)
    • third-party-summary: add blocking-time impact (#9486)
    • tracehouse: sort trace events by nesting order (#9230)
    • add source-maps gatherer (#9101)
    • unused-css: allow up to 10KB of unused CSS per file (#9479)

    CLI

    • list audit categories in help text (#9399)

    Clients

    • devtools: fix collapsing-width svg in flexbox (#9602)
    • devtools: update test command to run only .js files (#9532)
    • proto: don't filter channel from configSettings (#9554)
    • viewer: remove obsolete polyfills (#9553)
    • proto: update import hooks, obey line length (#9595)

    Deps

    • chrome-launcher: update to 0.11.2 (#9515)
    • details-element-polyfill: update to 2.4.0 (#9552)
    • jsonlint-mod: update to 1.7.5 (#9465)
    • update transitive deps (#9670)

    Docs

    • fix broken plugin example link (#9524)
    • lightwallet: add link to budget.json repo (#9579)

    I18n

    • import translations from tc/ (#9577, #9620, #9454)
    • add registerLocaleData() method (#9638)
    • rewrite aria-required-children titles (#9590)
    • reword pwa-page-transitions description (#9615)
    • throw on excess placeholder replacement values (#9580)
    • remove translated messages when ICU arguments change (#9598)
    • use better types for intl-messageformat (#9570)
    • add code spans to uses-rel-preconnect description (#9568)
    • fix bugs in locale-importing scripts (#9621)
    • fix custom formatted ICU within plurals (#9460)
    • capitalize robots.txt displayValue (#9567)
    • add link to cldr parentLocales (#9520)
    • move pwa audits to i18n system (#9105)
    • use TypeScript compiler to collect UIStrings (#9487)
    • align type names with docs (#9461)
    • expand placeholder support (#9114)
    • rewrite td-headers-attr titles (#9587)
    • improve Intl polyfill and use it in Util (#9584)

    Report

    • make dropdown match ARIA action menu button pattern (#9433)
    • move drop-down logic into a separate class (#9564)
    • topbar: fix overflowing url (#9497)
    • viewer: add option for loading from the PSI API (#9546)
    • viewer: fix favicon typo (#9629)
    • don't use unnessary monospace (#9626)
    • remove PWA badge flicker workaround for Chrome (#9636)
    • add utm params to web.dev links (#9555)
    • update favicon to new logo (#9591)
    • render unstyled json (rather than throwing) when LHR contains unknown details type (#9557)

    Tests

    • migrate travis to xenial for modern Chrome support (#9654)
    • fixtures: use relative path in static server 404 page (d0e5c58)
    • report: add axe-core validation of report output (#9421)
    • add index page for static server (#9541)
    • smokehouse: use mime-types + proper encoding for response write (#9542)
    • retry cli tests up to 3 times in appveyor (#9512)
    • simplify serving of zone.js (#9672)

    Misc

    • add comment on diff between document.write() audit and intervention (#9644)
    • refactor collect-strings to use glob and work on windows (#9406)
    • trim missed yarn.lock cruft & deduplicate dependencies (#9603, #9600)
    • replace deprecated uglify-es with terser (#9594)
    • share markdown parsing in collect-strings and the report (#9514)
    • add note about global.URL in node 10 (#9449)
    • build: include locale files in devtools roll (#9639)
  • 5.2.0 - 2019-07-24

    5.2.0 (2019-07-24)

    Expected DevTools release in Chrome 77 (September 2019)

    New Audits

    • Third-Party Usage, a new performance diagnostic that shows a breakdown of third-party resources in the page and the time/bytes needed to load them (#9067)
    • Total Blocking Time, an experimental new metric that serves as a companion to TTI to help prioritize unblocking the main thread. Since it is currently experimental, the audit is unscored and appears only in the raw LHR JSON, not in the HTML report. (#8975, #9409)

    Notable changes

    • tracehouse: performance trace processing has been moved to its own directory in lib/tracehouse/ to serve as a more standalone library (9f80524, 1af2edd, 7ba6776, ddff3d6)
    • certificate security errors are no longer a fatal Lighthouse error, though the Chrome error page will still return few results in the report by default. See the docs for testing a page in this situation. (#8865)

    New contributors!

    Thanks to @AngeloGulina, @jamesgeorge007, @johnemau, @kaushikchaubal, @mitchellsimoens, @NickolasBenakis, @noelyoo, @PatOnTheBack, @rishichawda, and @Remexllee for their first contributions!

    Core

    • support saving and loading errors in artifacts (#9397)
    • config: assert all audit requiredArtifacts will be gathered (#9284)
    • domstats: support an empty html body (#9340)
    • font-display: limit false positives (#9148)
    • font-size: calculate accurate line/column for styles (#9356)
    • font-size: comment why source 'Other' occurs (#9363)
    • localize invalid-URL error message (#9334)
    • gather-runner: add PageLoadError base artifact (#9236)
    • gather-runner: don't save trace on pass with pageLoadError (#9198)
    • gather-runner: treat Chrome interstitials as pageLoadErrors (#9176)
    • gather-runner: always reset scroll position (#9060)
    • gather-runner: convert PAGE_HUNG to non-fatal runtimeError (#9121)
    • manifest-parser: handle blob manifests (#9088)
    • page-functions: don't try to clone a ShadowRoot (#9079)
    • perf: speed up tap-target's isVisible() (#9056)
    • tracehouse: allow missing FCP (#9174)

    CLI

    • accept flags from a file (#9109)

    Clients

    • devtools: audits2->audits and defer reading resources (#8985, #9344)
    • devtools: unset overflow in print (#9274)
    • lightrider: update processForProto method signature, string -> LH.Result (#9016)
    • lightrider: serialize errors in artifacts (#9410)

    Deps

    • update axe-core to 3.3.0 (#9343)
    • update typescript to 3.5.3 (#9357)
    • update chrome-launcher to 0.11.1 (#9339)
    • intl: move from devDep to dep (#9309)
    • update debug to 2.6.9 (#9398)
    • update to open from opn (#9267)
    • update outdated transitive deps (#9347)
    • update brfs to 2.0.2 (#9312)
    • remove commitizen as local dep (#9246)
    • update extend to 3.0.2 (#9184)
    • bump transitive dep js-yaml (#9131)
    • update bundlesize, add more budgets (#9089)

    Docs

    • add i18n overview and authoring documentation (#9361)
    • link to good first issues (#9440)
    • add instructions for testing with self-signed certificate (#9112)
    • update understanding-results.md (#9226)
    • change score type from 'string' to 'number' (#9225)
    • readme: add Exthouse to related projects (#9243)
    • readme: add lighthouse-jest-example to related projects (#9172)
    • readme: add lighthouse-persist to related projects(#9161)
    • readme: add gimbal integration to related projects (#9083)
    • readme: update lighthouse-mocha-example related project (#9158)
    • readme: alphabetize related projects (#9110)
    • fix various typos (#9411)

    I18n

    • introduce script to swap in new locale to LHR (#8755)
    • enable local debug locale, en-XL (#9192)
    • begin localization of audits in best-practices (#9092)
    • add es-419 (#9171)
    • localize column headers of budget audits (#9127)

    Report

    • fix audit explanation rendering (#9439)
    • accessibility: add heading role to report category gauge (#9422)
    • add link to docs on performance scoring (#9355)
    • use full-bleed image thumbnails (#9238)
    • show disabled checkbox when all/no urls are third party (#9299)
    • remove unnecessary attribute in svg (#9301)
    • make urls clickable (#9224)
    • use css grid for metrics (#9273)
    • center and style top-level runtimeError (#9271)
    • create naming convention for css variables (#9149, 37f7261, ece89ec)
    • add aria-labels to tools button and metric toggle (#9201)
    • update permalink calculations for correct hash nav scroll position (#9188)
    • devtools: enable report UI features (#9157)
    • position sticky-header highlighter with css grid (#9186)
    • ensure SVG elements in <defs> have unique ids (#9151)
    • only print light theme (#9173)
    • make 'tools' menu focus-able (#9169)
    • rename 'exports' to 'tools' (#9135)
    • remove unused css vars (#9144)

    Tests

    • relax contrast font size expectation (#9441)
    • font-size: assert on source (#9400, #9413)
    • assert vulnerable-library ranges have upper bounds (#9308)
    • i18n: update canonical locale test for node 12.6 (#9396)
    • i18n: throw when no ICU replacement value is given (#9384)
    • run CI with a frozen yarn.lock (#9362)
    • smokehouse: assert on expected array length (#9292)
    • smokehouse: always assert lhr.runtimeError (#9130)
    • tags-blocking-first-paint: make alternate stylesheets not blocking (#9248)
    • improve drag-and-drop test coverage (#9314)
    • clean up crufty gather-runner tests (#9227)

    Misc

    • fix yarn.lock and translations master drift (#9404)
    • build: adjust deployment filenames (#9338, #9434)
    • build: create error-y LHR for the deploy (#9283)
    • network-server-latency: fix serverResponseTime typo (#9388)
    • localize logged GatherRunner error (#9291)
    • remove duplicate colon from regex (#9295)
    • runner: add assertion for devtoolsLog as requiredArtifact (#9290)
    • add yarn static-server script (#9293)
    • fix typo in performance-budget smoke test (#9244)
    • add .idea to .gitignore for WebStorm developers (#9275)
    • build: generate report variants in deployment (#9280)
    • suggest uploading issue repro (#9217)
    • use CHROME_PATH variable in CI and scripts (#9202)
    • update broken tracing-processor require (#9123)
    • address release script feedback (#9111)
    • release script should commit with format vX.Y.Z (#9090)

    Full 5.2.0 Changelog

  • 5.1.0 - 2019-05-31

    5.1.0 (2019-05-30)

    Full Changelog

    New contributors!

    Thanks to our new contributors 👽🐷🐰🐯🐻!
    @thebengeu
    @boyney123

    Core

    • gather-runner: treat NO_FCP as a pageLoadError (#8340)
    • logging: change log messages for gathering and trace retrieval (#9029)
    • tap-targets: don't exclude visible position absolute elements from audit (#7778)
    • budget: throw error on duplicate budget types (#8915)
    • config: split out config helpers (#9003)
    • gather-runner: always reset scroll position (reverted) (#8625)
    • image-elements: drop spritesheet logic (#8940)
    • refactor gather-runner control flow (#8964)
    • perf: speed up getNodePath (#9055)
    • performance-budget: add MP-FID as budget metric (#8905)
    • runner: fix missing timing properties in the browser (#9072)

    Report

    • two rows for filmstrip on mobile (#8563)
    • move gauge styles to main stylesheet (#8893)
    • show metric descriptions by default when errors exist (#9054)
    • show fireworks only if all core categories score 100 (#9073)
    • make gauge font size and positioning dynamic (#9057)
    • hide 3rd party filter checkbox if all rows are 3rd party (#8966)
    • fix word breaking of display text, move metric disclaimer (#9030)
    • show nodeLabel for DOM nodes in addition to snippet (#8961)

    Clients

    • devtools: move topbar out of scrollable container (#9077)
    • devtools: enable sticky header, top bar, and report ui features (#9023)
    • devtools: ignore dark mode media query (#9082)
    • devtools: update version in tests on lh roll (#8819)
    • lr: insert assets in lhr for logging purposes (#9002)

    CLI

    • flags: accept comma-separated array values (#8933)

    Docs

    • plugins: add link to field-performance plugin (#9051)
    • plugins: rename Google AdSpeed Insights to Publisher Ads Audit (#8906)
    • add lighthouse-plugin-field-performance to plugins (#9049)
    • add performance-budgets to related projects (#8971)

    I18n

    • minor fr and ta translation updates (#8999)

    Misc

    • assets: remove outdated extension screenshots (#9015)
    • dot-js require() everywhere (#9006)
    • remove unneeded reportCategories from LH.ReportResult (#9001)
    • update minify-trace scripts; extract to lib/ (#8968)
    • fix master: tmp revert of scroll change in #8625 (#9059)

    Tests

    • lint: require file extension in require() (#9017)
    • update a11y sample artifacts (#9010)
    • remove compile-devtools on travis (#8988)
    • smoke: re-enable dialog prompt (#8894)
from lighthouse GitHub release notes
Commit messages
Package name: lighthouse
  • 848b543 5.6.0 (#9856)
  • e3fcd6e tests(smokehouse): fix tmp directory creation (#9855)
  • 1f07249 deps: update third-party-web to 0.11.0 (#9849)
  • d9e6499 core(gather): add new MainDocumentContent public artifact (#9781)
  • ba2f21b i18n(import): web.dev links and small corrections (#9846)
  • 21c8d2f core(stack-packs): add angular, react, amp, and magento packs (#9797)
  • 85b8a92 core(tracehouse): allow child to start <1ms before parent (#9786)
  • 2a3cc4c misc(errors-in-console): warn on use of unrecognized audit options (#9829)
  • 5cc3990 core: rename Element to LHElement (#9832)
  • da4e851 clients(lr): don't include html report assets in bundle (#9828)
  • 8cfd64b core(driver): fix error handling for Runtime.evaluate (#9831)
  • d50ef9e misc(build): minify report javascript for lightrider report generator (#9823)
  • dbcb52c test(build): attempt bundle test three times in CI (#9830)
  • cb48d46 core(errors-in-console): add ignoredPatterns option (#9480)
  • 94810f3 report(viewer): minify inlined report-generator bundle (#9596)
  • 90458f8 misc: rewrite dom-size description (#9821)
  • e9168e7 tests(build): use firehouse smoke test runner to test bundle (#9791)
  • 288171a report: rephrase titles for 3rdparty & crc (#9419)
  • e9410a1 core(image-elements): cache naturalSize results (#9818)
  • 6d56a70 misc: more releasing tweaks (#9772)
  • 75ae0f8 docs(readme): add Lighthouse Check to related projects (#9753)
  • 1b8f4d8 docs(related-projects): add the is-website-vulnerable CLI tool (#9810)
  • 67460dd docs(related-projects): add the gradle lighthouse plugin (#9789)
  • b163103 report: update logo in top bar (#9728)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@asilvas asilvas merged commit e6ac673 into master Mar 21, 2020
@asilvas asilvas deleted the snyk-upgrade-dffbd34d483cd4fa53a1636716ea01bc branch March 21, 2020 02:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants