chore(deps): bump the production-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: esbuild, isomorphic-dompurify and sass.

Updates esbuild from 0.20.2 to 0.21.4

Release notes

Sourced from esbuild's releases.

v0.21.4

• Update support for import assertions and import attributes in node (#3778)

  Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

  ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]
  example.mjs:1:40:
    1 │ import json from "esbuild/package.json" assert { type: "json" }
      │                                         ~~~~~~
      ╵                                         with
  
  Did you mean to use "with" instead of "assert"?
  

  Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

• Fix for await transform when a label is present

  This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

  // Original code
  async function test() {
    outer: for await (const x of [Promise.resolve([0, 1])]) {
      for (const y of x) if (y) break outer
      throw 'fail'
    }
  }
  // Old output (with --target=es6)
  function test() {
  return __async(this, null, function* () {
  outer: try {
  for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
  const x = temp.value;
  for (const y of x) if (y) break outer;
  throw "fail";
  }
  } catch (temp) {
  error = [temp];
  } finally {
  try {
  more && (temp = iter.return) && (yield temp.call(iter));
  } finally {
  if (error)
  throw error[0];
  }
  }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.21.4

• Update support for import assertions and import attributes in node (#3778)

  Import assertions (the assert keyword) have been removed from node starting in v22.0.0. So esbuild will now strip them and generate a warning with --target=node22 or above:

  ▲ [WARNING] The "assert" keyword is not supported in the configured target environment ("node22") [assert-to-with]
  example.mjs:1:40:
    1 │ import json from "esbuild/package.json" assert { type: "json" }
      │                                         ~~~~~~
      ╵                                         with
  
  Did you mean to use "with" instead of "assert"?
  

  Import attributes (the with keyword) have been backported to node 18 starting in v18.20.0. So esbuild will no longer strip them with --target=node18.N if N is 20 or greater.

• Fix for await transform when a label is present

  This release fixes a bug where the for await transform, which wraps the loop in a try statement, previously failed to also move the loop's label into the try statement. This bug only affects code that uses both of these features in combination. Here's an example of some affected code:

  // Original code
  async function test() {
    outer: for await (const x of [Promise.resolve([0, 1])]) {
      for (const y of x) if (y) break outer
      throw 'fail'
    }
  }
  // Old output (with --target=es6)
  function test() {
  return __async(this, null, function* () {
  outer: try {
  for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp, error; more = !(temp = yield iter.next()).done; more = false) {
  const x = temp.value;
  for (const y of x) if (y) break outer;
  throw "fail";
  }
  } catch (temp) {
  error = [temp];
  } finally {
  try {
  more && (temp = iter.return) && (yield temp.call(iter));
  } finally {
  if (error)
  throw error[0];
  }

... (truncated)

Commits

• 67cbf87 publish 0.21.4 to npm
• 4ad11c3 fix #3639, fix #3646: pass with to onResolve
• 516ca31 fix #3343: allow bundle-internal string aliases
• 9e2f304 fix #3416, fix #3425: better enum constant folding
• 8f1faf7 implement late constant-folding for && || ??
• 7d50a50 implement late constant-folding of string enums
• 1b29ac7 fold equality checks after cross-module inlining
• d7a8bf3 formatting support for @position-try (for #3773)
• 5069410 fix #3778: import assertions/attributes for node
• 11d568c run make update-compat-table
• Additional commits viewable in compare view

Updates isomorphic-dompurify from 2.9.0 to 2.11.0

Release notes

Sourced from isomorphic-dompurify's releases.

Updated dependencies

Changelog

• Updated dompurify.

See the complete changelog for more details.

Release

2.11.0

Updated dependencies

Changelog

• Updated dompurify.

See the complete changelog for more details.

Release

2.10.0

Commits

• 422a93d Updated dependencies.
• fc2f1e0 Merge pull request #268 from kkomelin/dependabot/npm_and_yarn/dompurify-3.1.4
• b312969 ---
• cf2d9f1 Upgraded dependencies. Added some more meta-keywords. Increased version.
• 5b7d3cf Merge pull request #267 from kkomelin/dependabot/npm_and_yarn/dompurify-3.1.3
• c573583 Bump dompurify from 3.1.2 to 3.1.3
• See full diff in compare view

Updates sass from 1.76.0 to 1.77.2

Release notes

Sourced from sass's releases.

Dart Sass 1.77.2

To install Sass 1.77.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Don't emit deprecation warnings for functions and mixins beginning with __.

• Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

• Properly handle the --silence-deprecation flag.

• Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.1

To install Sass 1.77.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Fix a crash that could come up with importers in certain contexts.

See the full changelog for changes in earlier releases.

Dart Sass 1.77.0

To install Sass 1.77.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Don't throw errors for at-rules in keyframe blocks.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.77.2

• Don't emit deprecation warnings for functions and mixins beginning with __.

• Allow user-defined functions whose names begin with _ and otherwise look like vendor-prefixed functions with special CSS syntax.

Command-Line Interface

• Properly handle the --silence-deprecation flag.

• Handle the --fatal-deprecation and --future-deprecation flags for --interactive mode.

1.77.1

• Fix a crash that could come up with importers in certain contexts.

1.77.0

• Don't throw errors for at-rules in keyframe blocks.

Commits

• 5121eb1 Don't treat underscores as hyphens for the purpose of error checking (#2247)
• bdc08fd Merge pull request #2246 from sass/deprecation-cli
• 9a9e483 Add a test to ensure the sass_api dartdoc version matches sass
• 8c48a01 Expand dartdoc range for sass_api to match sass
• c9f0d3f Fix deprecation flags in the CLI and add tests
• 54a6dec Bump lints from 3.0.0 to 4.0.0 (#2242)
• 372f15c Fix MapExtensions.getOption() for nullable types (#2241)
• 85f39d5 Allow at-rules in @keyframes blocks (#2236)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[netlify]

✅ Deploy Preview for triviaccessibility ready!

Name	Link
🔨 Latest commit	49738ea
🔍 Latest deploy log	https://app.netlify.com/sites/triviaccessibility/deploys/66542044f58fee000836b462
😎 Deploy Preview	https://deploy-preview-204--triviaccessibility.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[dependabot]

Superseded by #205.