dependabot[bot] opened a new pull request, #42833: URL: https://github.com/apache/superset/pull/42833
Bumps [react-ace](https://github.com/securingsincity/react-ace) from 14.0.1 to 15.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/securingsincity/react-ace/releases";>react-ace's releases</a>.</em></p> <blockquote> <h2>v15.0.0 - ESM Support</h2> <p>Closes <a href="https://redirect.github.com/securingsincity/react-ace/issues/2122";>#2122</a> and <a href="https://redirect.github.com/securingsincity/react-ace/issues/1540";>#1540</a></p> <p>react-ace now ships a native ESM build alongside CommonJS. import AceEditor from "react-ace" resolves to real ES modules in modern bundlers and in Node — fixing default-import interop under Vite 8's stricter CommonJS handling (<a href="https://redirect.github.com/securingsincity/react-ace/issues/2122";>#2122</a>).</p> <ul> <li>New exports map with import/require conditions and per-format TypeScript declarations (lib/index.mjs + lib/index.d.mts for ESM, lib/index.js + lib/index.d.ts for CJS)</li> <li>module field added for older bundlers; main/types unchanged for legacy tooling</li> <li>Verified with publint and arethetypeswrong (green across node10, node16, and bundler resolution modes)</li> </ul> <p>Breaking changes</p> <ul> <li>Deep imports are no longer supported. The exports map only exposes the package root, so paths like react-ace/lib/ace no longer resolve. Import everything from the root instead: import AceEditor, { split as SplitEditor, diff as DiffEditor } from "react-ace";</li> <li>These were never documented; most users are unaffected.</li> <li>ace-builds now loads when react-ace is imported rather than lazily on first render. Bundle contents are unchanged (it was always included); if you want to defer loading, lazy-load react-ace itself, e.g. via React.lazy().</li> </ul> <p>Other changes</p> <ul> <li>The SSR window shim is gone — modern ace-builds evaluates cleanly without a window object, so server-side imports work with no globals mutation.</li> <li>Fixed prop-types usage that would crash under Node's ESM loader (PropTypes.oneOfType is not a function).</li> <li>Loading Ace from a CDN (window.ace) continues to work as before, as do the UMD bundles in dist/.</li> </ul> <h2>v14.1.0</h2> <h2>What's Changed</h2> <ul> <li>Fix handling of a null or absent "markers" property by <a href="https://github.com/vog";><code>@vog</code></a> in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2110";>securingsincity/react-ace#2110</a></li> <li><a href="https://redirect.github.com/securingsincity/react-ace/issues/2111";>#2111</a> Adding to onFocus event for Split editor, the index of the editor focused by <a href="https://github.com/vagostep";><code>@vagostep</code></a> in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2112";>securingsincity/react-ace#2112</a></li> <li>Vite Upgrade by <a href="https://github.com/securingsincity";><code>@securingsincity</code></a> in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2114";>securingsincity/react-ace#2114</a></li> <li>Replace deprecated packages by <a href="https://github.com/itkrt2y";><code>@itkrt2y</code></a> in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2118";>securingsincity/react-ace#2118</a></li> <li>Upgrade dependencies and build pipeline by <a href="https://github.com/securingsincity";><code>@securingsincity</code></a> in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2124";>securingsincity/react-ace#2124</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vog";><code>@vog</code></a> made their first contribution in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2110";>securingsincity/react-ace#2110</a></li> <li><a href="https://github.com/vagostep";><code>@vagostep</code></a> made their first contribution in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2112";>securingsincity/react-ace#2112</a></li> <li><a href="https://github.com/itkrt2y";><code>@itkrt2y</code></a> made their first contribution in <a href="https://redirect.github.com/securingsincity/react-ace/pull/2118";>securingsincity/react-ace#2118</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/securingsincity/react-ace/compare/v14.0.1...v14.1.0";>https://github.com/securingsincity/react-ace/compare/v14.0.1...v14.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/securingsincity/react-ace/commit/334f49e2681ed5c2a84847b739d821d4b8df9534";><code>334f49e</code></a> Merge pull request <a href="https://redirect.github.com/securingsincity/react-ace/issues/2125";>#2125</a> from securingsincity/esm-support</li> <li><a href="https://github.com/securingsincity/react-ace/commit/a60deb259cd455ae845d3f42e682756fc41bad25";><code>a60deb2</code></a> Add ESM Support</li> <li><a href="https://github.com/securingsincity/react-ace/commit/f475e45624f8faf81bf24e490aef9d9ae93eb607";><code>f475e45</code></a> Update npm-publish</li> <li><a href="https://github.com/securingsincity/react-ace/commit/9617b4ae4341b6f9d869af5b144af5f08b7abec1";><code>9617b4a</code></a> Merge pull request <a href="https://redirect.github.com/securingsincity/react-ace/issues/2124";>#2124</a> from securingsincity/dependency-rethink</li> <li><a href="https://github.com/securingsincity/react-ace/commit/e89fd5ff44d2f34331a13cbf7e89f94b4465f2dc";><code>e89fd5f</code></a> Fix test</li> <li><a href="https://github.com/securingsincity/react-ace/commit/301584fffe66adf37d97c2f1ca70b860be145ade";><code>301584f</code></a> Harden GitHub Actions workflows</li> <li><a href="https://github.com/securingsincity/react-ace/commit/78c8adf04b23a447fa26d92722f5d9a43ad5050b";><code>78c8adf</code></a> Upgrade actions</li> <li><a href="https://github.com/securingsincity/react-ace/commit/012d1e1df1a0dbd18ff6472e8c2c590e5239e6e4";><code>012d1e1</code></a> Update CI workflows for new build pipeline</li> <li><a href="https://github.com/securingsincity/react-ace/commit/37e7bf8e3a3f99e383d51094ee62e0a0732ea289";><code>37e7bf8</code></a> Upgrade dependencies and build pipeline</li> <li><a href="https://github.com/securingsincity/react-ace/commit/eab885b803da54cea39192f5270ecc213456ad54";><code>eab885b</code></a> Merge pull request <a href="https://redirect.github.com/securingsincity/react-ace/issues/2118";>#2118</a> from itkrt2y/main</li> <li>Additional commits viewable in <a href="https://github.com/securingsincity/react-ace/compare/v14.0.1...v15.0.0";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for react-ace since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
