Tailwind CSS plugin for Material Components elevation classes

  • By Joonas Kykkänen
  • Last update: Dec 31, 2022
  • Comments: 16

tailwindcss-elevation

Build Status Test Coverage

Add Material Components elevation classes to your Tailwind CSS project. Check out the demo!

Installation

To install the package, run

npm install tailwindcss-elevation

To activate the plugin, add a tailwind.config.js file to the root of your project:

module.exports = {
  plugins: [
    require('tailwindcss-elevation')(['responsive']),
  ]
}

If you don't need the responsive versions, you can pass in an empty array.

You can also include other supported variants. For the full list of available variants, see https://tailwindcss.com/docs/configuring-variants.

To learn more about configuring your Tailwind CSS installation, see https://tailwindcss.com/docs/configuration.

Configuration

To change the default configurations, you can include a config object:

module.exports = {
  plugins: [
    require('tailwindcss-elevation')(
      [],
      {
        color: '77,192,181',
        opacityBoost: '0.23'
      }
    )
  ]
}

Config object accepts the following properties:

  • color changes the default box-shadow base color and accepts an RGB (e.g. '77,192,181') or HEX triplet (e.g. '#4dc0b5') as its value. When using a CSS custom property (variable) as the value, you have to use an RGB triplet.
  • opacityBoost is added to the default box-shadow opacity and accepts a number between 0.0 and 1.0

Basic usage

You can apply elevation to an element using the .elevation-{z-value} utilities.

<button class="elevation-2">Button</button>

The z values range from 0 to 24.

Changelog

You can find the changelog of the tailwindcss-elevation package here.

Material documentation

Github

https://github.com/jonaskay/tailwindcss-elevation

Comments(16)

  • 1

    use HEX color values in addition to RGB

    Hi,

    this package is brilliant, I like it for the fact that it gets me that bit of material design I actually like, not the whole shebang I don't need.

    However, I've set it up and it's performing nicely. I do have two themes though, light and dark which I switch between using CSS variables. See gists here https://gist.github.com/evdama/6a3ed83f4528b5f9ad5d7743c1646096 and https://gist.github.com/e8c5540d7ea1a6b8e6792edf31009ffd

    I'm using the colors from the colors object inside the tw conf file as you can see, grab them into the two theme objects using tailwinds theme() and then onward to wherever stuff needs to go inside the app.

    As you can see from line 345 in tailwind conf file I'm using a CSS variables that injects a different hex color value based on which theme is currently choosen by the user. So what's needed is for elevation to not just accept RGB values but also hex.

    I thought about doing a custom local fork with a code snippet from e.g. https://css-tricks.com/converting-color-spaces-in-javascript/ but then I though it would be much better also for others if this would be added upstream.

  • 2

    different colors per elevation

    it would be great for theming to have the option for different colors with each elevation-<z>. For example, if I have two buttons side by side and one should have the default gray shadow and the other one a blue-500, how would I do that today?

  • 3

    Bump tailwindcss from 1.9.6 to 2.2.6

    Bumps tailwindcss from 1.9.6 to 2.2.6.

    Release notes

    Sourced from tailwindcss's releases.

    v2.2.6

    Fixed

    • Fix issue where base styles not generated for translate transforms in JIT (#5038)

    v2.2.5

    Added

    • Added self-baseline utility (I know this is a patch release, no one's going to die relax) (#5000)

    Changed

    • JIT: Optimize universal selector usage by inlining only the relevant selectors (#4850))

      This provides a very significant performance boost on pages with a huge number of DOM nodes, but there's a chance it could be a breaking change in very rare edge cases we haven't thought of. Please open an issue if anything related to shadows, rings, transforms, filters, or backdrop-filters seems to be behaving differently after upgrading.

    Fixed

    • Fix support for step-start and step-end in animation utilities (#4795))
    • JIT: Prevent presence of !* in templates from ruining everything (#4816))
    • JIT: Improve support for quotes in arbitrary values (#4817))
    • Fix filter/backdrop-filter/transform utilities being inserted into the wrong position if not all core plugins are enabled (#4852))
    • JIT: Fix @layer rules being mistakenly inserted during incremental rebuilds (#4853))
    • Improve build performance for projects with many small non-Tailwind stylesheets (#4644)
    • Ensure [hidden] works as expected on elements where we override the default display value in Preflight (#4873)
    • Fix variant configuration not being applied to backdropOpacity utilities (#4892)

    v2.2.4

    Fixed

    • Remove postinstall script that was preventing people from installing the library (1eacfb9)

    v2.2.3

    Added

    • Pass extended color palette to theme closures so it can be used without installing Tailwind when using npx tailwindcss (359252c)

    Fixed

    • JIT: Explicitly error when - is used as a custom separator (#4704)
    • JIT: Don't add multiple ~ when stacking peer-* variants (#4757)
    • Remove outdated focus style fix in Preflight (#4780)
    • Enable purge if provided on the CLI (#4772)
    • JIT: Fix error when not using a config file with postcss-cli (#4773)
    • Fix issue with resolveConfig not being importable in Next.js pags (#4725)

    v2.2.2

    Fixed

    • JIT: Reintroduce transform, filter, and backdrop-filter classes purely to create stacking contexts to minimize the impact of the breaking change (#4700)

    ... (truncated)

    Changelog

    Sourced from tailwindcss's changelog.

    [2.2.6] - 2021-07-21

    Fixed

    • Fix issue where base styles not generated for translate transforms in JIT (#5038)

    [2.2.5] - 2021-07-21

    Added

    • Added self-baseline utility (I know this is a patch release, no one's going to die relax) (#5000)

    Changed

    • JIT: Optimize universal selector usage by inlining only the relevant selectors (#4850))

      This provides a very significant performance boost on pages with a huge number of DOM nodes, but there's a chance it could be a breaking change in very rare edge cases we haven't thought of. Please open an issue if anything related to shadows, rings, transforms, filters, or backdrop-filters seems to be behaving differently after upgrading.

    Fixed

    • Fix support for step-start and step-end in animation utilities (#4795))
    • JIT: Prevent presence of !* in templates from ruining everything (#4816))
    • JIT: Improve support for quotes in arbitrary values (#4817))
    • Fix filter/backdrop-filter/transform utilities being inserted into the wrong position if not all core plugins are enabled (#4852))
    • JIT: Fix @layer rules being mistakenly inserted during incremental rebuilds (#4853))
    • Improve build performance for projects with many small non-Tailwind stylesheets (#4644)
    • Ensure [hidden] works as expected on elements where we override the default display value in Preflight (#4873)
    • Fix variant configuration not being applied to backdropOpacity utilities (#4892)

    [2.2.4] - 2021-06-23

    Fixed

    • Remove postinstall script that was preventing people from installing the library (1eacfb9)

    [2.2.3] - 2021-06-23

    Added

    • Pass extended color palette to theme closures so it can be used without installing Tailwind when using npx tailwindcss (359252c)

    Fixed

    • JIT: Explicitly error when - is used as a custom separator (#4704)
    • JIT: Don't add multiple ~ when stacking peer-* variants (#4757)
    • Remove outdated focus style fix in Preflight (#4780)
    • Enable purge if provided on the CLI (#4772)
    • JIT: Fix error when not using a config file with postcss-cli (#4773)
    • Fix issue with resolveConfig not being importable in Next.js pags (#4725)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 4

    Bump eslint from 7.15.0 to 7.31.0

    Bumps eslint from 7.15.0 to 7.31.0.

    Release notes

    Sourced from eslint's releases.

    v7.31.0

    • efdbb12 Upgrade: @​eslint/eslintrc to v0.4.3 (#14808) (Brandon Mills)
    • a96b05f Update: add end location to report in consistent-return (refs #12334) (#14798) (Nitin Kumar)
    • e0e8e30 Docs: update BUG_REPORT template (#14787) (Nitin Kumar)
    • 39115c8 Docs: provide more context to no-eq-null (#14801) (gfyoung)
    • 9a3c73c Docs: fix a broken link (#14790) (Sam Chen)
    • ddffa8a Update: Indicating the operator in question (#14764) (Paul Smith)
    • bba714c Update: Clarifying what changes need to be made in no-mixed-operators (#14765) (Paul Smith)
    • b0d22e3 Docs: Mention benefit of providing meta.docs.url (#14774) (Bryan Mishkin)
    • 000cc79 Sponsors: Sync README with website (ESLint Jenkins)
    • a6a7438 Chore: pin [email protected] (#14771) (Milos Djermanovic)

    v7.30.0

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)

    ... (truncated)

    Changelog

    Sourced from eslint's changelog.

    v7.31.0 - July 17, 2021

    • efdbb12 Upgrade: @​eslint/eslintrc to v0.4.3 (#14808) (Brandon Mills)
    • a96b05f Update: add end location to report in consistent-return (refs #12334) (#14798) (Nitin Kumar)
    • e0e8e30 Docs: update BUG_REPORT template (#14787) (Nitin Kumar)
    • 39115c8 Docs: provide more context to no-eq-null (#14801) (gfyoung)
    • 9a3c73c Docs: fix a broken link (#14790) (Sam Chen)
    • ddffa8a Update: Indicating the operator in question (#14764) (Paul Smith)
    • bba714c Update: Clarifying what changes need to be made in no-mixed-operators (#14765) (Paul Smith)
    • b0d22e3 Docs: Mention benefit of providing meta.docs.url (#14774) (Bryan Mishkin)
    • 000cc79 Sponsors: Sync README with website (ESLint Jenkins)
    • a6a7438 Chore: pin [email protected] (#14771) (Milos Djermanovic)

    v7.30.0 - July 2, 2021

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0 - June 18, 2021

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0 - June 4, 2021

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 5

    Bump autoprefixer from 10.0.4 to 10.3.0

    Bumps autoprefixer from 10.0.4 to 10.3.0.

    Release notes

    Sourced from autoprefixer's releases.

    10.3 “Чести своей не отдам никому”

    In Autoprefixer 10.3 @​lukewarlow added ::file-selector-button support.

    ::-webkit-file-upload-button {
      border: 2px solid #6c5ce7;
      padding: .2em .4em;
      border-radius: .2em;
      background-color: #a29bfe;
    }
    

    ::file-selector-button { border: 2px solid #6c5ce7; padding: .2em .4em; border-radius: .2em; background-color: #a29bfe; }

    10.2.6

    10.2.5

    10.2.4

    • Fixed browser names in npx autoprefixer --info.

    10.2.3

    • Fixed PostCSS 8 support.

    10.2.2

    • Fixed PostCSS 8 plugins compatibility.

    10.2.1

    10.2 “Sub rosa”

    Autoprefixer 10.2 now has built-in TypeScript definitions. You do not need @types/autoprefixer anymore.

    Thanks to @​Semigradsky and DefinitelyTyped’s contributors.

    @​Sheraff also improved docs.

    10.1 “Pula”

    ... (truncated)

    Changelog

    Sourced from autoprefixer's changelog.

    Change Log

    This project adheres to Semantic Versioning.

    10.3 “Чести своей не отдам никому”

    • Added ::file-selector-button support (by Luke Warlow).

    10.2.6

    10.2.5

    • Fixed : support in @supports (by Dmitry Semigradsky).
    • Fixed docs (by Christian Oliff).

    10.2.4

    • Fixed browser names in npx autoprefixer --info.

    10.2.3

    • Fixed PostCSS 8 support.

    10.2.2

    • Fixed PostCSS 8 plugins compatibility.

    10.2.1

    10.2 “Sub rosa”

    • Added TypeScript definitions (by Dmitry Semigradsky).
    • Fixed docs (by Florian Pellet).

    10.1 “Pula”

    • Added dpcm unit support to min-resolution: 2dppx (by Robert Eisele).
    • Fixed rational approximation in min-resolution (by Robert Eisele).
    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 6

    Bump eslint from 7.15.0 to 7.30.0

    Bumps eslint from 7.15.0 to 7.30.0.

    Release notes

    Sourced from eslint's releases.

    v7.30.0

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)
    • e4f111b Fix: arrow-body-style crash with object pattern (fixes #14633) (#14635) (Milos Djermanovic)
    • ec28b5a Chore: upgrade eslint-plugin-eslint-plugin (#14590) (薛定谔的猫)
    • 85a2725 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.27.0

    • 2c0868c Chore: merge all html formatter files into html.js (#14612) (Milos Djermanovic)
    • 9e9b5e0 Update: no-unused-vars false negative with comma operator (fixes #14325) (#14354) (Nitin Kumar)
    • afe9569 Chore: use includes instead of indexOf (#14607) (Mikhail Bodrov)
    • c0f418e Chore: Remove lodash (#14287) (Stephen Wade)
    • 52655dd Update: no-restricted-imports custom message for patterns (fixes #11843) (#14580) (Alex Holden)
    • 967b1c4 Chore: Fix typo in large.js (#14589) (Ikko Ashimine)
    • 2466a05 Sponsors: Sync README with website (ESLint Jenkins)

    ... (truncated)

    Changelog

    Sourced from eslint's changelog.

    v7.30.0 - July 2, 2021

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0 - June 18, 2021

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0 - June 4, 2021

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)
    • e4f111b Fix: arrow-body-style crash with object pattern (fixes #14633) (#14635) (Milos Djermanovic)
    • ec28b5a Chore: upgrade eslint-plugin-eslint-plugin (#14590) (薛定谔的猫)
    • 85a2725 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.27.0 - May 21, 2021

    • 2c0868c Chore: merge all html formatter files into html.js (#14612) (Milos Djermanovic)
    • 9e9b5e0 Update: no-unused-vars false negative with comma operator (fixes #14325) (#14354) (Nitin Kumar)
    • afe9569 Chore: use includes instead of indexOf (#14607) (Mikhail Bodrov)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 7

    Bump husky from 4.3.0 to 7.0.0

    Bumps husky from 4.3.0 to 7.0.0.

    Release notes

    Sourced from husky's releases.

    v7.0.0

    • Improve .husky/ directory structure. .husky/.gitignore is now unnecessary and can be removed.
    • Improve error output (shorter)
    • Update husky-init CLI
    • Update husky-4-to-7 CLI
    • Drop Node 10 support

    Please help me develop and release OSS projects :heart: on GitHub Sponsors or Open Collective. Thank you for your support!

    v6.0.0

    After being in early access for Open Source projects and Sponsors for a limited time, I'm happy to announce that husky 6 is MIT again and can be freely used in commercial projects! 🎉

    Many thanks to the Open Source projects and Companies which have switched to/sponsored the new husky during this period!

    OSS is my full-time job, please consider sponsoring the development of husky on GitHub sponsors or Open Collective. Thank you!

    Breaking change

    • husky init has been moved to its own package (npx husky-init)

    Added

    • Programmatically use husky: require('husky')
    • TypeScript definitions

    Migrating from husky 4

    Husky 6 contains breaking changes. If you're coming from v4, npm install [email protected] won't be enough.

    Recommended: see husky-4-to-6 CLI to automatically migrate your config. There's also a dedicated section in the docs.

    If you're curious why config has changed, you may be interested in reading: https://blog.typicode.com/husky-git-hooks-javascript-config/

    Also Husky 6 follows official npm and Yarn best practices regarding autoinstall. It's recommended to use prepare script instead (see usage in docs).

    v5.2.0

    • Add set command to replace hooks (husky set .husky/pre-commit cmd)
    • Update add command to append command (husky add .husky/pre-commit cmd)
    • Improve error messages

    v5.1.3

    • docs: add specific Yarn v2 install/uninstall instructions
    • cli: husky init will detect Yarn v2 and initialize accordingly

    v5.1.2

    • docs: recommend prepare script instead of postinstall (#890)
    • cli: husky init use prepare script (#890)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 8

    Bump tailwindcss from 1.9.6 to 2.2.4

    Bumps tailwindcss from 1.9.6 to 2.2.4.

    Release notes

    Sourced from tailwindcss's releases.

    v2.2.4

    Fixed

    • Remove postinstall script that was preventing people from installing the library (1eacfb9)

    v2.2.3

    Added

    • Pass extended color palette to theme closures so it can be used without installing Tailwind when using npx tailwindcss (359252c)

    Fixed

    • JIT: Explicitly error when - is used as a custom separator (#4704)
    • JIT: Don't add multiple ~ when stacking peer-* variants (#4757)
    • Remove outdated focus style fix in Preflight (#4780)
    • Enable purge if provided on the CLI (#4772)
    • JIT: Fix error when not using a config file with postcss-cli (#4773)
    • Fix issue with resolveConfig not being importable in Next.js pags (#4725)

    v2.2.2

    Fixed

    • JIT: Reintroduce transform, filter, and backdrop-filter classes purely to create stacking contexts to minimize the impact of the breaking change (#4700)

    v2.2.1

    Fixed

    • Recover from errors gracefully in CLI watch mode (#4693)
    • Fix issue with media queries not being generated properly when using PostCSS 7 (#4695)

    v2.2.0

    Tailwind CSS v2.2.0

    Six weeks ago I didn't even have v2.2 on my roadmap and yet somehow here we are today, with one of the biggest Tailwind CSS feature releases of all-time?!

    This release is loaded with tons of cool new stuff, mostly targeting the new Just-in-Time mode which unlocks so many cool ideas we probably couldn't have pulled off if we had to keep being mindful of the CSS file size in development.

    To upgrade, install the latest version via npm:

    npm install -D [email protected]
    

    Note that we've had to make a couple small changes to the JIT engine as we've added features, fixed bugs, and improved the overall reliability, so make sure to read about the changes and deprecations when upgrading if you are using just-in-time mode.

    ... (truncated)

    Changelog

    Sourced from tailwindcss's changelog.

    [2.2.4] - 2021-06-23

    Fixed

    • Remove postinstall script that was preventing people from installing the library (1eacfb9)

    [2.2.3] - 2021-06-23

    Added

    • Pass extended color palette to theme closures so it can be used without installing Tailwind when using npx tailwindcss (359252c)

    Fixed

    • JIT: Explicitly error when - is used as a custom separator (#4704)
    • JIT: Don't add multiple ~ when stacking peer-* variants (#4757)
    • Remove outdated focus style fix in Preflight (#4780)
    • Enable purge if provided on the CLI (#4772)
    • JIT: Fix error when not using a config file with postcss-cli (#4773)
    • Fix issue with resolveConfig not being importable in Next.js pags (#4725)

    [2.2.2] - 2021-06-18

    Fixed

    • JIT: Reintroduce transform, filter, and backdrop-filter classes purely to create stacking contexts to minimize the impact of the breaking change (#4700)

    [2.2.1] - 2021-06-18

    Fixed

    • Recover from errors gracefully in CLI watch mode (#4693)
    • Fix issue with media queries not being generated properly when using PostCSS 7 (#4695)

    [2.2.0] - 2021-06-17

    Changed

    • JIT: Use "tracking" context by default instead of "watching" context for improved reliability with most bundlers (#4514)

      Depending on which tooling you use, you may need to explicitly set TAILWIND_MODE=watch until your build runner has been updated to support PostCSS's dir-dependency message type.

    Added

    • Add background-origin utilities (#4117)
    • Improve @apply performance in projects that process many CSS sources (#3178)
    • JIT: Don't use CSS variables for color utilities if color opacity utilities are disabled (#3984)
    • JIT: Redesign matchUtilities API to make it more suitable for third-party use (#4232)
    • JIT: Support applying important utility variants (#4260)
    • JIT: Support coercing arbitrary values when the type isn't detectable (#4263)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 9

    [Security] Bump color-string from 1.5.4 to 1.5.5

    Bumps color-string from 1.5.4 to 1.5.5. This update includes a security fix.

    Vulnerabilities fixed

    Sourced from The GitHub Security Advisory Database.

    Regular Expression Denial of Service (ReDOS) A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

    Affected versions: < 1.5.5

    Release notes

    Sourced from color-string's releases.

    1.5.5 (Patch/Security Release) - hwb() ReDos patch (low-severity)

    Release notes copied verbatim from the commit message, which can be found here: 0789e21284c33d89ebc4ab4ca6f759b9375ac9d3

    Discovered by Yeting Li, c/o Colin Ife via Snyk.io.
    

    A ReDos (Regular Expression Denial of Service) vulnerability was responsibly disclosed to me via email by Colin on Mar 5 2021 regarding an exponential time complexity for linearly increasing input lengths for hwb() color strings.

    Strings reaching more than 5000 characters would see several milliseconds of processing time; strings reaching more than 50,000 characters began seeing 1500ms (1.5s) of processing time.

    The cause was due to a the regular expression that parses hwb() strings - specifically, the hue value - where the integer portion of the hue value used a 0-or-more quantifier shortly thereafter followed by a 1-or-more quantifier.

    This caused excessive backtracking and a cartesian scan, resulting in exponential time complexity given a linear increase in input length.

    Thank you Yeting Li and Colin Ife for bringing this to my attention in a secure, responsible and professional manner.

    A CVE will not be assigned for this vulnerability.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 10

    Bump eslint from 7.15.0 to 7.29.0

    Bumps eslint from 7.15.0 to 7.29.0.

    Release notes

    Sourced from eslint's releases.

    v7.29.0

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)
    • e4f111b Fix: arrow-body-style crash with object pattern (fixes #14633) (#14635) (Milos Djermanovic)
    • ec28b5a Chore: upgrade eslint-plugin-eslint-plugin (#14590) (薛定谔的猫)
    • 85a2725 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.27.0

    • 2c0868c Chore: merge all html formatter files into html.js (#14612) (Milos Djermanovic)
    • 9e9b5e0 Update: no-unused-vars false negative with comma operator (fixes #14325) (#14354) (Nitin Kumar)
    • afe9569 Chore: use includes instead of indexOf (#14607) (Mikhail Bodrov)
    • c0f418e Chore: Remove lodash (#14287) (Stephen Wade)
    • 52655dd Update: no-restricted-imports custom message for patterns (fixes #11843) (#14580) (Alex Holden)
    • 967b1c4 Chore: Fix typo in large.js (#14589) (Ikko Ashimine)
    • 2466a05 Sponsors: Sync README with website (ESLint Jenkins)
    • fe29f18 Sponsors: Sync README with website (ESLint Jenkins)
    • 086c1d6 Chore: add more test cases for no-sequences (#14579) (Nitin Kumar)
    • 6a2ced8 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.26.0

    • aaf65e6 Upgrade: eslintrc for ModuleResolver fix (#14577) (Brandon Mills)
    • ae6dbd1 Fix: track variables, not names in require-atomic-updates (fixes #14208) (#14282) (Patrick Ahmetovic)
    • 6a86e50 Chore: remove loose-parser tests (fixes #14315) (#14569) (Milos Djermanovic)
    • ee3a3ea Fix: create .eslintrc.cjs for module type (#14304) (Nitin Kumar)
    • 6791dec Docs: fix example for require-atomic-updates (#14562) (Milos Djermanovic)
    • 388eb7e Sponsors: Sync README with website (ESLint Jenkins)
    • f071d1e Update: Add automated suggestion to radix rule for parsing decimals (#14291) (Bryan Mishkin)
    • 0b6a3f3 New: Include XO style guide in eslint --init (#14193) (Federico Brigante)

    ... (truncated)

    Changelog

    Sourced from eslint's changelog.

    v7.29.0 - June 18, 2021

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)
    • e2bed2e Sponsors: Sync README with website (ESLint Jenkins)
    • 8490fb4 Sponsors: Sync README with website (ESLint Jenkins)
    • ddbe877 Sponsors: Sync README with website (ESLint Jenkins)

    v7.28.0 - June 4, 2021

    • 1237705 Upgrade: @​eslint/eslintrc to 0.4.2 (#14672) (Milos Djermanovic)
    • 123fb86 Docs: Add Feedback Needed triage description (#14670) (Nicholas C. Zakas)
    • c545163 Update: support multiline /eslint-env/ directives (fixes #14652) (#14660) (薛定谔的猫)
    • 8d1e75a Upgrade: glob-parent version in package.json (#14658) (Hamza Najeeb)
    • 1f048cb Fix: no-implicit-coercion false positive with String() (fixes #14623) (#14641) (Milos Djermanovic)
    • d709abf Chore: fix comment location in no-unused-vars (#14648) (Milos Djermanovic)
    • e44ce0a Fix: no-duplicate-imports allow unmergeable (fixes #12758, fixes #12760) (#14238) (Soufiane Boutahlil)
    • bb66a3d New: add getPhysicalFilename() method to rule context (fixes #11989) (#14616) (Nitin Kumar)
    • 2e43dac Docs: fix no-sequences example (#14643) (Nitin Kumar)
    • 958ff4e Docs: add note for arrow functions in no-seq rule (#14578) (Nitin Kumar)
    • e4f111b Fix: arrow-body-style crash with object pattern (fixes #14633) (#14635) (Milos Djermanovic)
    • ec28b5a Chore: upgrade eslint-plugin-eslint-plugin (#14590) (薛定谔的猫)
    • 85a2725 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.27.0 - May 21, 2021

    • 2c0868c Chore: merge all html formatter files into html.js (#14612) (Milos Djermanovic)
    • 9e9b5e0 Update: no-unused-vars false negative with comma operator (fixes #14325) (#14354) (Nitin Kumar)
    • afe9569 Chore: use includes instead of indexOf (#14607) (Mikhail Bodrov)
    • c0f418e Chore: Remove lodash (#14287) (Stephen Wade)
    • 52655dd Update: no-restricted-imports custom message for patterns (fixes #11843) (#14580) (Alex Holden)
    • 967b1c4 Chore: Fix typo in large.js (#14589) (Ikko Ashimine)
    • 2466a05 Sponsors: Sync README with website (ESLint Jenkins)
    • fe29f18 Sponsors: Sync README with website (ESLint Jenkins)
    • 086c1d6 Chore: add more test cases for no-sequences (#14579) (Nitin Kumar)
    • 6a2ced8 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.26.0 - May 7, 2021

    • aaf65e6 Upgrade: eslintrc for ModuleResolver fix (#14577) (Brandon Mills)
    • ae6dbd1 Fix: track variables, not names in require-atomic-updates (fixes #14208) (#14282) (Patrick Ahmetovic)
    • 6a86e50 Chore: remove loose-parser tests (fixes #14315) (#14569) (Milos Djermanovic)
    • ee3a3ea Fix: create .eslintrc.cjs for module type (#14304) (Nitin Kumar)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 11

    Bump tailwindcss from 1.9.6 to 2.2.2

    Bumps tailwindcss from 1.9.6 to 2.2.2.

    Release notes

    Sourced from tailwindcss's releases.

    v2.2.2

    Fixed

    • JIT: Reintroduce transform, filter, and backdrop-filter classes purely to create stacking contexts to minimize the impact of the breaking change (#4700)

    v2.2.1

    Fixed

    • Recover from errors gracefully in CLI watch mode (#4693)
    • Fix issue with media queries not being generated properly when using PostCSS 7 (#4695)

    v2.2.0

    Tailwind CSS v2.2.0

    Six weeks ago I didn't even have v2.2 on my roadmap and yet somehow here we are today, with one of the biggest Tailwind CSS feature releases of all-time?!

    This release is loaded with tons of cool new stuff, mostly targeting the new Just-in-Time mode which unlocks so many cool ideas we probably couldn't have pulled off if we had to keep being mindful of the CSS file size in development.

    To upgrade, install the latest version via npm:

    npm install -D [email protected]
    

    Note that we've had to make a couple small changes to the JIT engine as we've added features, fixed bugs, and improved the overall reliability, so make sure to read about the changes and deprecations when upgrading if you are using just-in-time mode.


    ... (truncated)

    Changelog

    Sourced from tailwindcss's changelog.

    [2.2.2] - 2021-06-18

    Fixed

    • JIT: Reintroduce transform, filter, and backdrop-filter classes purely to create stacking contexts to minimize the impact of the breaking change (#4700)

    [2.2.1] - 2021-06-18

    Fixed

    • Recover from errors gracefully in CLI watch mode (#4693)
    • Fix issue with media queries not being generated properly when using PostCSS 7 (#4695)

    [2.2.0] - 2021-06-17

    Changed

    • JIT: Use "tracking" context by default instead of "watching" context for improved reliability with most bundlers (#4514)

      Depending on which tooling you use, you may need to explicitly set TAILWIND_MODE=watch until your build runner has been updated to support PostCSS's dir-dependency message type.

    Added

    • Add background-origin utilities (#4117)
    • Improve @apply performance in projects that process many CSS sources (#3178)
    • JIT: Don't use CSS variables for color utilities if color opacity utilities are disabled (#3984)
    • JIT: Redesign matchUtilities API to make it more suitable for third-party use (#4232)
    • JIT: Support applying important utility variants (#4260)
    • JIT: Support coercing arbitrary values when the type isn't detectable (#4263)
    • JIT: Support for raw syntax in purge config (#4272)
    • Add empty variant (#3298)
    • Update modern-normalize to v1.1 (#4287)
    • Implement theme function internally, remove postcss-functions dependency (#4317)
    • Add screen function to improve nesting plugin compatibility (#4318)
    • JIT: Add universal shorthand color opacity syntax (#4348)
    • JIT: Add @tailwind variants directive to replace @tailwind screens (#4356)
    • JIT: Add support for PostCSS dir-dependency messages in TAILWIND_DISABLE_TOUCH mode (#4388)
    • JIT: Add per-side border color utilities (#4404)
    • JIT: Add support for before and after pseudo-element variants and content utilities (#4461)
    • Add new transform and extract APIs to simplify PurgeCSS/JIT customization (#4469)
    • JIT: Add exhaustive pseudo-class and pseudo-element variant support (#4482)
    • JIT: Add caret-color utilities (#4499)
    • Rename lightBlue to sky, emit console warning when using deprecated name (#4513)
    • New CLI with improved JIT support, --watch mode, and more (#4526, 4558)
    • JIT: Add new peer-* variants for styling based on sibling state (#4556)
    • Expose safelist as a top-level option under purge for both JIT and classic engines (#4580)
    • JIT: Remove need for transform class when using classes like scale-*, rotate-*, etc. (#4604)
    • JIT: Remove need for filter and backdrop-filter classes when using classes like contrast-*, backdrop-blur-*, etc. (#4614)
    • Support passing a custom path for your PostCSS configuration in the Tailwind CLI (#4607)
    • Add blur-none by default with intent to deprecate blur-0 (#4614)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)
  • 12

    Bump decode-uri-component from 0.2.0 to 0.2.2

    Bumps decode-uri-component from 0.2.0 to 0.2.2.

    Release notes

    Sourced from decode-uri-component's releases.

    v0.2.2

    • Prevent overwriting previously decoded tokens 980e0bf

    https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

    v0.2.1

    • Switch to GitHub workflows 76abc93
    • Fix issue where decode throws - fixes #6 746ca5d
    • Update license (#1) 486d7e2
    • Tidelift tasks a650457
    • Meta tweaks 66e1c28

    https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

  • 13

    Bump minimist from 1.2.5 to 1.2.6

    Bumps minimist from 1.2.5 to 1.2.6.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

  • 14

    Bump pathval from 1.1.0 to 1.1.1

    Bumps pathval from 1.1.0 to 1.1.1.

    Release notes

    Sourced from pathval's releases.

    v1.1.1

    Fixes a security issue around prototype pollution.

    Commits
    • db6c3e3 chore: v1.1.1
    • 7859e0e Merge pull request #60 from deleonio/fix/vulnerability-prototype-pollution
    • 49ce1f4 style: correct rule in package.json
    • c77b9d2 fix: prototype pollution vulnerability + working tests
    • 49031e4 chore: remove very old nodejs
    • 57730a9 chore: update deps and tool configuration
    • a123018 Merge pull request #55 from chaijs/remove-lgtm
    • 07eb4a8 Delete MAINTAINERS
    • a0147cd Merge pull request #54 from astorije/patch-1
    • aebb278 Center repo name on README
    • Additional commits viewable in compare view
    Maintainer changes

    This version was pushed to npm by chai, a new releaser for pathval since your current version.


    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

  • 15

    Bump path-parse from 1.0.6 to 1.0.7

    Bumps path-parse from 1.0.6 to 1.0.7.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

  • 16

    Bump eslint from 7.15.0 to 7.32.0

    Bumps eslint from 7.15.0 to 7.32.0.

    Release notes

    Sourced from eslint's releases.

    v7.32.0

    • 3c78a7b Chore: Adopt eslint-plugin/prefer-message-ids rule internally (#14841) (Bryan Mishkin)
    • faecf56 Update: change reporting location for curly rule (refs #12334) (#14766) (Nitin Kumar)
    • d7dc07a Fix: ignore lines with empty elements (fixes #12756) (#14837) (Soufiane Boutahlil)
    • 1bfbefd New: Exit on fatal error (fixes #13711) (#14730) (Antonios Katopodis)
    • ed007c8 Chore: Simplify internal no-invalid-meta rule (#14842) (Bryan Mishkin)
    • d53d906 Docs: Prepare data for website to indicate rules with suggestions (#14830) (Bryan Mishkin)
    • d28f2ff Docs: Reference eslint-config-eslint to avoid potential for staleness (#14805) (Brett Zamir)
    • 8be8a36 Chore: Adopt eslint-plugin/require-meta-docs-url rule internally (#14823) (Bryan Mishkin)
    • f9c164f Docs: New syntax issue template (#14826) (Nicholas C. Zakas)
    • eba0c45 Chore: assertions on reporting loc in unicode-bom (refs #12334) (#14809) (Nitin Kumar)
    • ed945bd Docs: fix multiple broken links (#14833) (Sam Chen)
    • 60df44c Chore: use actions/[email protected] (#14816) (Nitin Kumar)
    • 6641d88 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.31.0

    • efdbb12 Upgrade: @​eslint/eslintrc to v0.4.3 (#14808) (Brandon Mills)
    • a96b05f Update: add end location to report in consistent-return (refs #12334) (#14798) (Nitin Kumar)
    • e0e8e30 Docs: update BUG_REPORT template (#14787) (Nitin Kumar)
    • 39115c8 Docs: provide more context to no-eq-null (#14801) (gfyoung)
    • 9a3c73c Docs: fix a broken link (#14790) (Sam Chen)
    • ddffa8a Update: Indicating the operator in question (#14764) (Paul Smith)
    • bba714c Update: Clarifying what changes need to be made in no-mixed-operators (#14765) (Paul Smith)
    • b0d22e3 Docs: Mention benefit of providing meta.docs.url (#14774) (Bryan Mishkin)
    • 000cc79 Sponsors: Sync README with website (ESLint Jenkins)
    • a6a7438 Chore: pin [email protected] (#14771) (Milos Djermanovic)

    v7.30.0

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0

    • bfbfe5c New: Add only to RuleTester (refs eslint/rfcs#73) (#14677) (Brandon Mills)
    • c2cd7b4 New: Add ESLint#getRulesMetaForResults() (refs #13654) (#14716) (Nicholas C. Zakas)
    • eea7e0d Chore: remove duplicate code (#14719) (Nitin Kumar)
    • 6a1c7a0 Fix: allow fallthrough comment inside block (fixes #14701) (#14702) (Kevin Gibbons)
    • a47e5e3 Docs: Add Mega-Linter to the list of integrations (#14707) (Nicolas Vuillamy)
    • 353ddf9 Chore: enable reportUnusedDisableDirectives in eslint-config-eslint (#14699) (薛定谔的猫)
    • 757c495 Chore: add some rules to eslint-config-eslint (#14692) (薛定谔的猫)
    • c93a222 Docs: fix a broken link (#14697) (Sam Chen)
    • 655c118 Sponsors: Sync README with website (ESLint Jenkins)

    ... (truncated)

    Changelog

    Sourced from eslint's changelog.

    v7.32.0 - July 30, 2021

    • 3c78a7b Chore: Adopt eslint-plugin/prefer-message-ids rule internally (#14841) (Bryan Mishkin)
    • faecf56 Update: change reporting location for curly rule (refs #12334) (#14766) (Nitin Kumar)
    • d7dc07a Fix: ignore lines with empty elements (fixes #12756) (#14837) (Soufiane Boutahlil)
    • 1bfbefd New: Exit on fatal error (fixes #13711) (#14730) (Antonios Katopodis)
    • ed007c8 Chore: Simplify internal no-invalid-meta rule (#14842) (Bryan Mishkin)
    • d53d906 Docs: Prepare data for website to indicate rules with suggestions (#14830) (Bryan Mishkin)
    • d28f2ff Docs: Reference eslint-config-eslint to avoid potential for staleness (#14805) (Brett Zamir)
    • 8be8a36 Chore: Adopt eslint-plugin/require-meta-docs-url rule internally (#14823) (Bryan Mishkin)
    • f9c164f Docs: New syntax issue template (#14826) (Nicholas C. Zakas)
    • eba0c45 Chore: assertions on reporting loc in unicode-bom (refs #12334) (#14809) (Nitin Kumar)
    • ed945bd Docs: fix multiple broken links (#14833) (Sam Chen)
    • 60df44c Chore: use actions/[email protected] (#14816) (Nitin Kumar)
    • 6641d88 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.31.0 - July 17, 2021

    • efdbb12 Upgrade: @​eslint/eslintrc to v0.4.3 (#14808) (Brandon Mills)
    • a96b05f Update: add end location to report in consistent-return (refs #12334) (#14798) (Nitin Kumar)
    • e0e8e30 Docs: update BUG_REPORT template (#14787) (Nitin Kumar)
    • 39115c8 Docs: provide more context to no-eq-null (#14801) (gfyoung)
    • 9a3c73c Docs: fix a broken link (#14790) (Sam Chen)
    • ddffa8a Update: Indicating the operator in question (#14764) (Paul Smith)
    • bba714c Update: Clarifying what changes need to be made in no-mixed-operators (#14765) (Paul Smith)
    • b0d22e3 Docs: Mention benefit of providing meta.docs.url (#14774) (Bryan Mishkin)
    • 000cc79 Sponsors: Sync README with website (ESLint Jenkins)
    • a6a7438 Chore: pin [email protected] (#14771) (Milos Djermanovic)

    v7.30.0 - July 2, 2021

    • 5f74642 Chore: don't check Program.start in SourceCode#getComments (refs #14744) (#14748) (Milos Djermanovic)
    • 19a871a Docs: Suggest linting plugins for ESLint plugin developers (#14754) (Bryan Mishkin)
    • aa87329 Docs: fix broken links (#14756) (Sam Chen)
    • 278813a Docs: fix and add more examples for new-cap rule (fixes #12874) (#14725) (Nitin Kumar)
    • ed1da5d Update: ecmaVersion allows "latest" (#14720) (薛定谔的猫)
    • 104c0b5 Update: improve use-isnan rule to detect Number.NaN (fixes #14715) (#14718) (Nitin Kumar)
    • b08170b Update: Implement FlatConfigArray (refs #13481) (#14321) (Nicholas C. Zakas)
    • f113cdd Chore: upgrade eslint-plugin-eslint-plugin (#14738) (薛定谔的猫)
    • 1b8997a Docs: Fix getRulesMetaForResults link syntax (#14723) (Brandon Mills)
    • aada733 Docs: fix two broken links (#14726) (Sam Chen)
    • 8972529 Docs: Update README team and sponsors (ESLint Jenkins)

    v7.29.0 - June 18, 2021

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
    • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

    Additionally, you can set the following in your Dependabot dashboard:

    • Update frequency (including time of day and day of week)
    • Pull request limits (per update run and/or open at any time)
    • Out-of-range updates (receive only lockfile updates, if desired)
    • Security updates (receive only security updates, if desired)