[Snyk] Security upgrade cheerio from 1.0.0-rc.2 to 1.0.0 #175
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix 4 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
large-file/package.json
large-file/package-lock.json
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-LODASH-1040724
SNYK-JS-NTHCHECK-1586032
SNYK-JS-CSSWHAT-3035488
SNYK-JS-LODASH-1018905
Release notes
Package name: cheerio
Cheerio 1.0 is here! 🎉
Announcement Blog Post
Breaking Changes
The minimum NodeJS version is now 18.17 or higher #3959
Import paths were simplified. For example, use
cheerio/slim
instead ofcheerio/lib/slim
. #3970The deprecated default Cheerio instance and static methods were removed. #3974
Before, it was possible to write code like this:
html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS
Make sure to always load documents first:
cheerio.load('<test></test>').html();
Node types previously re-exported by Cheerio must now be imported directly
from (
domhandler
)(https://github.com/fb55/domhandler). #3969htmlparser2 options now reside exclusively under the
xml
key (#2916):New Features
Fixes
cheerio/utils
by @ blixt in #2601data
, and simplify by @ fb55 in #2818closest
be able to start from text nodes by @ Qualtagh in #2811Other
Full Changelog: v1.0.0-rc.12...v1.0.0
Bugfix release. Fixed issues:
prop
undefined handling with jQuery by @ fb55 in #2557cheerio/lib/utils
by @ blixt in #2601New Contributors
Full Changelog: v1.0.0-rc.11...v1.0.0-rc.12
cheerio@1.0.0-rc.11
is hopefully the last RC before the 1.0.0 release of Cheerio. There are two APIs that will be added for the next major release: Anexract
method (#2523) and NodeJS specific loader methods (#2051). These are still in flux and I'd appreciate feedback on the proposals.A big thank you to everyone that contributed to this release! This includes code contributors, as well as the amazing financial support on GitHub Sponsors!
Under the hood, a lot of work for this release went into updating parse5, cheerio's default HTML parser. Have a look at parse5's release notes to see what has changed there.
Breaking
script
andstyle
contents are added again in.text()
#2509.text()
to.prop('innerText')
Features
cheerio-select
#2511pseudos
option..prop()
method:textContent
andinnerText
props #2214baseURI
option, which will lead tohref
andsrc
props to be resolved as URLs. #2510slim
export, which will always use htmlparser2 #1960Fixes
text
turn passed values to strings #2047undefined
in the return type ofget
by @ glen-84 in #2392undefined
return value #2505Refactor
domutils
module directly #1928isHTML
#1935load
#1951closest
#2057Development Experience
Docs
New Contributors
Full Changelog: v1.0.0-rc.10...v1.0.0-rc.11
Fixes:
.html(node)
now moves passed nodes (#1923, fixes #940) 258b26bfilter
work on all collections (#1870, fixes #1867) fb8d31eDocumentation:
require
5dfbd35Refactors:
traversing
(#1909) 58e090ais
totraversing
, optimize (#1908) 1c6fa3edomEach
(#1892) feda230load
export a function (#1869) c370f4ev1.0.0-rc.9...v1.0.0-rc.10
Port to TypeScript
Cheerio has been ported entirely to TypeScript (in #1816)! This eliminates a lot of edge-cases within Cheerio and will allow you to use Cheerio with confidence. This release also features a new documentation website based on TypeDoc, allowing you to quickly navigate all available methods: https://cheerio.js.org
Breaking change: If you were using the function exported by Cheerio directly instead of first
load()
ing a document, you will now have to update therequire
to use thedefault
export.+ const cheerio = require("cheerio").default;
cheerio('div', dom)
Please note that this way of using Cheerio is deprecated and might be removed in a future version. Please consider updating your code to:
const $ = cheerio.load(dom)
$('div')
Note: Cheerio uses template literal types to determine return types. These are available starting with TypeScript 4.1, so you might have to bump your TypeScript version.
For TypeScript types, Cheerio now implements the
ArrayLike<T>
interface. That means that Cheerio instances can contain objects of arbitrary types, but not all methods can be called on them.The TypeScript compiler will figure out what structures you are operating on:
$('<div>')
, it will product aCheerio<Node>
type.Node
is the base class for DOM elements and includes eg. comment and text nodes.$('.foo')
, it will produce aCheerio<Element>
, as onlyElement
s can be part of the result set.Element
is the class representing tags.$('...').map()
to map to arbitrary values, and will get a compiler error when trying to call method that are not supported.$('.foo').map((i, el) => $(el).text()).attr('test')
will no longer be possible, as.attr
is not allowed to be called on aCheerio<string>
.This release does not contain other changes to functionality. Feedback is greatly appreciated; if you encounter a problem, please file an issue!
v1.0.0-rc.6...v1.0.0-rc.9
Second botched release. Please use
v1.0.0-rc.9
instead.Published without a
lib
directory — please ignore.Breaking:
prevAll
,prevUntil
andparentsUntil
. The new order matches jQuery.This release contains three breaking changes inherited from dependencies.
type: 'tag'
.New features:
.unwrap
(#1651 by @ 5saviahv) 2037d83.wrapAll
(#1590 by @ 5saviahv) cd4a4d9prop('innerHTML')
(#1578 by @ fb55) c58258fscriptingEnabled
parse5 option (#1707 by @ 5saviahv) 7eb4cc4scriptingEnabled
tofalse
, it is now possible to parse the contents of<noscript>
tags.Types:
.load
type (#1584 by @ f0x52) 6a90bda.get
(#1759 by @ karlhorky) d706976.wrapAll
(#1740 by @ 5saviahv) b360762for of
loops (#1704 by @ mcpiroman) 8fef5aaAttrFunction
arguments (#1669 by @ maxma241) 5f2e9c3Bug fixes:
undefined
as value in.attr()
(#1757 by @ 5saviahv) 98186e8{prev,next}Until
(#1728 by @ fb55) f2615d2find
function (#1680 by @ 5saviahv) 9b28b49.add
modifying previous selections (#1656 by @ 5saviahv) 9f9b493.find
siblings (#1583 by @ fb55) 1062a6creplaceWith
replacing element with itself (#1581 by @ fb55) 88ae636attr
handling ofundefined
as value (#1582 by @ fb55) 3b35ae4load
(#1580 by @ fb55)