fix(deps): update minor and patch dependencies for gatsby

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
browserslist	^4.21.7 -> ^4.21.9
enhanced-resolve	^5.14.1 -> ^5.15.0
graphql	^16.6.0 -> ^16.7.1
graphql-http	^1.18.0 -> ^1.19.0
react-server-dom-webpack	0.0.0-experimental-c8b778b7f-20220825 -> 0.0.1
socket.io	4.6.1 -> 4.7.1
socket.io-client	4.6.1 -> 4.7.1
webpack	^5.85.0 -> ^5.88.1
webpack-stats-plugin	^1.1.1 -> ^1.1.3
xstate (source)	^4.37.2 -> ^4.38.0

---

Release Notes

browserslist/browserslist (browserslist)

v4.21.9

Compare Source

• Fixed Opera Mobile edge cases (by Steve Repsher).

v4.21.8

Compare Source

• Fixed supports query and mobileToDesktop (by Steve Repsher).

webpack/enhanced-resolve (enhanced-resolve)

v5.15.0

Compare Source

New Features

• Ignore false/null/undefined plugins by @​alexander-akait in https://github.com/webpack/enhanced-resolve/pull/389

Dependencies & Maintenance

• GitHub Workflows security hardening by @​sashashura in https://github.com/webpack/enhanced-resolve/pull/370
• Add cSpell commit hook by @​nschonni in https://github.com/webpack/enhanced-resolve/pull/327

New Contributors

• @​sashashura made their first contribution in https://github.com/webpack/enhanced-resolve/pull/370

Full Changelog: webpack/enhanced-resolve@v5.14.1...v5.15.0

graphql/graphql-js (graphql)

v16.7.1

Compare Source

v16.7.1 (2023-06-22)

📢 Big shout out to @​phryneas, who managed to reproduce this issue and come up with this fix.

Bug Fix 🐞

• #​3923 instanceOf: workaround bundler issue with process.env (@​IvanGoncharov)

Committers: 1

• Ivan Goncharov(@​IvanGoncharov)

v16.7.0

Compare Source

v16.7.0 (2023-06-21)

New Feature 🚀

• #​3887 check "globalThis.process" before accessing it (@​kettanaito)

Bug Fix 🐞

• #​3707 Fix crash in node when mixing sync/async resolvers (backport of #​3706) (@​chrskrchr)
• #​3838 Fix/invalid error propagation custom scalars (backport for 16.x.x) (@​stenreijers)

Committers: 3

• Artem Zakharchenko(@​kettanaito)
• Chris Karcher(@​chrskrchr)
• Sten Reijers(@​stenreijers)

graphql/graphql-http (graphql-http)

v1.19.0

Compare Source

Bug Fixes

• use: process global is not available in all environments and NODE_ENV doesn't necessarily depict production vs. development (d08ead3)

Features

• Use uWebSockets.js (#​91) (5089f46)

facebook/react (react-server-dom-webpack)

v0.0.0-experimental-fccf3a9fb-20230213

Compare Source

v0.0.0-experimental-fa4314841-20230502

Compare Source

v0.0.0-experimental-efb381bbf-20230505

Compare Source

v0.0.0-experimental-e40893d09-20221005

Compare Source

v0.0.0-experimental-e1dd0a2f5-20221115

Compare Source

v0.0.0-experimental-df12d7eac-20230510

Compare Source

v0.0.0-experimental-d962f35ca-20230418

Compare Source

v0.0.0-experimental-d1e35c703-20221110

Compare Source

socketio/socket.io (socket.io)

v4.7.1

Compare Source

The client bundle contains a few fixes regarding the WebTransport support.

Dependencies

• engine.io@~6.5.0 (no change)
• ws@~8.11.0 (no change)

v4.7.0

Compare Source

Bug Fixes

• remove the Partial modifier from the socket.data type (#​4740) (e5c62ca)

Features

Support for WebTransport

The Socket.IO server can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

• https://w3c.github.io/webtransport/
• https://developer.mozilla.org/en-US/docs/Web/API/WebTransport
• https://developer.chrome.com/articles/webtransport/

Until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:

import { readFileSync } from "fs";
import { createServer } from "https";
import { Server } from "socket.io";
import { Http3Server } from "@​fails-components/webtransport";

// WARNING: the total length of the validity period MUST NOT exceed two weeks (https://w3c.github.io/webtransport/#custom-certificate-requirements)
const cert = readFileSync("/path/to/my/cert.pem");
const key = readFileSync("/path/to/my/key.pem");

const httpsServer = createServer({
  key,
  cert
});

httpsServer.listen(3000);

const io = new Server(httpsServer, {
  transports: ["polling", "websocket", "webtransport"] // WebTransport is not enabled by default
});

const h3Server = new Http3Server({
  port: 3000,
  host: "0.0.0.0",
  secret: "changeit",
  cert,
  privKey: key,
});

(async () => {
  const stream = await h3Server.sessionStream("/socket.io/");
  const sessionReader = stream.getReader();

  while (true) {
    const { done, value } = await sessionReader.read();
    if (done) {
      break;
    }
    io.engine.onWebTransportSession(value);
  }
})();

h3Server.startServer();

Added in 123b68c.

Client bundles with CORS headers

The bundles will now have the right Access-Control-Allow-xxx headers.

Added in 63f181c.

Dependencies

• engine.io@~6.5.0 (diff)
• ws@~8.11.0 (no change)

v4.6.2

Compare Source

Bug Fixes

• exports: move types condition to the top (#​4698) (3d44aae)

Dependencies

• engine.io@~6.4.2 (diff)
• ws@~8.11.0 (no change)

socketio/socket.io-client (socket.io-client)

v4.7.1

Compare Source

Some bug fixes are included from the engine.io-client package:

• make closeOnBeforeunload default to false (a63066b)
• webtransport: properly handle abruptly closed connections (cf6aa1f)

Dependencies

• engine.io-client@~6.5.1 (diff)
• ws@~8.11.0 (no change)

v4.7.0

Compare Source

Bug Fixes

• properly report timeout error when connecting (5bc94b5)
• use same scope for setTimeout and clearTimeout calls (#​1568) (f2892ab)

Features

Support for WebTransport

The Engine.IO client can now use WebTransport as the underlying transport.

WebTransport is a web API that uses the HTTP/3 protocol as a bidirectional transport. It's intended for two-way communications between a web client and an HTTP/3 server.

References:

• https://w3c.github.io/webtransport/
• https://developer.mozilla.org/en-US/docs/Web/API/WebTransport
• https://developer.chrome.com/articles/webtransport/

For Node.js clients: until WebTransport support lands in Node.js, you can use the @fails-components/webtransport package:

import { WebTransport } from "@​fails-components/webtransport";

global.WebTransport = WebTransport;

Added in 7195c0f.

Cookie management for the Node.js client

When setting the withCredentials option to true, the Node.js client will now include the cookies in the HTTP requests, making it easier to use it with cookie-based sticky sessions.

import { io } from "socket.io-client";

const socket = io("https://example.com", {
  withCredentials: true
});

Added in 5fc88a6.

Conditional import of the ESM build with debug logs

By default, the ESM build does not include the debug package in the browser environments, because it increases the bundle size (see 16b6569).

Which means that, unfortunately, debug logs are not available in the devtools console, even when setting the localStorage.debug = ... attribute.

You can now import the build which includes the debug packages with a conditional import. Example with vite:

import { defineConfig } from 'vite'
import react from '@​vitejs/plugin-react'

export default defineConfig({
  plugins: [react()],
  server: {
    port: 4000
  },
  resolve: {
    conditions: ["development"]
  }
})

Reference: https://v2.vitejs.dev/config/#resolve-conditions

Added in 781d753.

Dependencies

• engine.io-client@~6.5.0 (diff)
• ws@~8.11.0 (no change)

v4.6.2

Compare Source

Bug Fixes

• exports: move types condition to the top (#​1580) (7ead241)

Dependencies

• engine.io-client@~6.4.0 (no change)
• ws@~8.11.0 (no change)

webpack/webpack (webpack)

v5.88.1

Compare Source

Developer Experience

• Significantly improve TypeScript coverage for Library Plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17414

Full Changelog: webpack/webpack@v5.88.0...v5.88.1

v5.88.0

Compare Source

New Features

• [CSS] - Use css/auto as the default css mode by @​burhanuday in https://github.com/webpack/webpack/pull/17399

Bug Fixes

• Fix bugs related to require.context and layer by @​alexander-akait in https://github.com/webpack/webpack/pull/17388
• Fix bug in runtime for CSS loading by @​alexander-akait in https://github.com/webpack/webpack/pull/17400
• Correct indirect call for tagged template expressions using correct this context by @​alexander-akait in https://github.com/webpack/webpack/pull/17397
• Update environment support for KaiOS browser by @​steverep in https://github.com/webpack/webpack/pull/17395
• Fix async module runtime code for running top-level-await by @​ahabhgk in https://github.com/webpack/webpack/pull/17393

Developer Experience

• Add example for stats minimal output by @​ersachin3112 in https://github.com/webpack/webpack/pull/17406
• Significantly improve type coverage for Dependency, Runtime, Template classes by @​alexander-akait in https://github.com/webpack/webpack/pull/17394

Dependencies & Maintenance

• Bump browserslist from 4.21.8 to 4.21.9 by @​dependabot in https://github.com/webpack/webpack/pull/17389
• Bump acorn from 8.8.2 to 8.9.0 by @​dependabot in https://github.com/webpack/webpack/pull/17402
• Bump eslint from 8.42.0 to 8.43.0 by @​dependabot in https://github.com/webpack/webpack/pull/17401
• Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by @​dependabot in https://github.com/webpack/webpack/pull/17407

New Contributors

• @​steverep made their first contribution in https://github.com/webpack/webpack/pull/17395

Full Changelog: webpack/webpack@v5.87.0...v5.88.0

v5.87.0

Compare Source

New Features

• Implement fetchPriority feature as parser option and magic comment by @​alexander-akait in https://github.com/webpack/webpack/pull/17249
• [CSS] - Introduce 'css/auto' as a css module type by @​ahabhgk in https://github.com/webpack/webpack/pull/16577
• [CSS] - Style-specific fields now automatically resolve in package.json by @​burhanuday in https://github.com/webpack/webpack/pull/17346
• webpack configuration API now accepts "falsy values" loaders and plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17339

Bug Fixes

• Fix codecov badge in readme by @​burhanuday in https://github.com/webpack/webpack/pull/17353

Developer Experience

• Add link to svelte loader for webpack by @​burhanuday in https://github.com/webpack/webpack/pull/17369
• Increase parser API types in internal plugins across dependency plugins @​alexander-akait in https://github.com/webpack/webpack/pull/17365

Dependencies & Maintenance

• Bump memfs from 3.5.2 to 3.5.3 by @​dependabot in https://github.com/webpack/webpack/pull/17347
• Bump webpack-cli from 5.1.3 to 5.1.4 by @​dependabot in https://github.com/webpack/webpack/pull/17349
• Bump es-module-lexer from 1.2.1 to 1.3.0 by @​dependabot in https://github.com/webpack/webpack/pull/17362
• Bump @​types/node from 20.2.5 to 20.3.0 by @​dependabot in https://github.com/webpack/webpack/pull/17361
• Bump core-js from 3.30.2 to 3.31.0 by @​dependabot in https://github.com/webpack/webpack/pull/17360
• Bump browserslist from 4.21.6 to 4.21.8 by @​dependabot in https://github.com/webpack/webpack/pull/17367
• Bump @​types/node from 20.3.0 to 20.3.1 by @​dependabot in https://github.com/webpack/webpack/pull/17366

New Contributors

@​aboktor made their first contribution in #​16991 #​16989
@​silverwind made their first contribution in #​17339 via #​17329

Full Changelog: webpack/webpack@v5.86.0...v5.87.0

v5.86.0

Compare Source

New Features

• Improved cache size performance via better handling of serialization for errors and bigints by @​alexander-akait in https://github.com/webpack/webpack/pull/17282
• Introduce an export default handler function option for ProgressPlugin by @​alexander-akait in https://github.com/webpack/webpack/pull/17312
• Support passing RegExp to splitChunks.chunks by @​hyf0 in https://github.com/webpack/webpack/pull/17332

Bug Fixes

• Fix layer capabilities for ContextModule types by @​huozhi in https://github.com/webpack/webpack/pull/17310
• Fix compatibility of __non_webpack_require__ with ES modules by @​alexander-akait in https://github.com/webpack/webpack/pull/17308
• Improve type coverage Chunk, ChunkGroup, and other plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/1731
• Do not add js extension for eval source maps when extension is not resolvable by @​alexander-akait in https://github.com/webpack/webpack/pull/17331

Developer Experience

• Improve type coverage for Json Module type and lazy load json-assertions package by @​alexander-akait in https://github.com/webpack/webpack/pull/17301

Dependencies & Maintenance

• Bump memfs from 3.5.1 to 3.5.2 by @​dependabot in https://github.com/webpack/webpack/pull/17315
• Bump webpack-cli from 5.1.1 to 5.1.3 by @​dependabot in https://github.com/webpack/webpack/pull/17314
• Bump eslint from 8.41.0 to 8.42.0 by @​dependabot in https://github.com/webpack/webpack/pull/17313

New Contributors

• @​huozhi made their first contribution in https://github.com/webpack/webpack/pull/17310
• @​hyf0 made their first contribution in https://github.com/webpack/webpack/pull/17332

Full Changelog: webpack/webpack@v5.85.1...v5.86.0

v5.85.1

Compare Source

Bug Fixes

• Fix bug in handling barrel imports (#​17305) by @​bworline in https://github.com/webpack/webpack/pull/17307 - NOTE: An internal API BasicEvaluatedExpression.getMemberRangeStarts has been changed to BasicEvaluatedExpression.getMemberRanges, please see type definition changes and the pull request for more information.

Dependencies & Maintenance

• Bump @​types/jest from 29.5.1 to 29.5.2 by @​dependabot in https://github.com/webpack/webpack/pull/17297

Full Changelog: webpack/webpack@v5.85.0...v5.85.1

FormidableLabs/webpack-stats-plugin (webpack-stats-plugin)

v1.1.3

Compare Source

Patch Changes

• Provenance Badge to NPM Addition (#​101)

v1.1.2

Compare Source

Patch Changes

• Adding GitHub Action release workflow (#​98)

statelyai/xstate (xstate)

v4.38.0

Compare Source

Minor Changes

• #​4098 ae7691811 Thanks @​davidkpiano! - The log, pure, choose, and stop actions were added to the main export:

  import { log, pure, choose, stop } from 'xstate';

---

Configuration

📅 Schedule: Branch creation - "before 7am on the first day of the month" in timezone GMT, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.