dependabot[bot]
0200995058
Bump webpack from 5.75.0 to 5.76.0 in /js ( #15159 )
...
Bumps [webpack](https://github.com/webpack/webpack ) from 5.75.0 to
5.76.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/releases ">webpack's
releases</a>.</em></p>
<blockquote>
<h2>v5.76.0</h2>
<h2>Bugfixes</h2>
<ul>
<li>Avoid cross-realm object access by <a
href="https://github.com/Jack-Works "><code>@Jack-Works</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16500 ">webpack/webpack#16500</a></li>
<li>Improve hash performance via conditional initialization by <a
href="https://github.com/lvivski "><code>@lvivski</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16491 ">webpack/webpack#16491</a></li>
<li>Serialize <code>generatedCode</code> info to fix bug in asset module
cache restoration by <a
href="https://github.com/ryanwilsonperkin "><code>@ryanwilsonperkin</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/16703 ">webpack/webpack#16703</a></li>
<li>Improve performance of <code>hashRegExp</code> lookup by <a
href="https://github.com/ryanwilsonperkin "><code>@ryanwilsonperkin</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/16759 ">webpack/webpack#16759</a></li>
</ul>
<h2>Features</h2>
<ul>
<li>add <code>target</code> to <code>LoaderContext</code> type by <a
href="https://github.com/askoufis "><code>@askoufis</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16781 ">webpack/webpack#16781</a></li>
</ul>
<h2>Security</h2>
<ul>
<li><a
href="https://github.com/advisories/GHSA-3rfm-jhwj-7488 ">CVE-2022-37603</a>
fixed by <a
href="https://github.com/akhilgkrishnan "><code>@akhilgkrishnan</code></a>
in <a
href="https://redirect.github.com/webpack/webpack/pull/16446 ">webpack/webpack#16446</a></li>
</ul>
<h2>Repo Changes</h2>
<ul>
<li>Fix HTML5 logo in README by <a
href="https://github.com/jakebailey "><code>@jakebailey</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16614 ">webpack/webpack#16614</a></li>
<li>Replace TypeScript logo in README by <a
href="https://github.com/jakebailey "><code>@jakebailey</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16613 ">webpack/webpack#16613</a></li>
<li>Update actions/cache dependencies by <a
href="https://github.com/piwysocki "><code>@piwysocki</code></a> in <a
href="https://redirect.github.com/webpack/webpack/pull/16493 ">webpack/webpack#16493</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Jack-Works "><code>@Jack-Works</code></a> made
their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16500 ">webpack/webpack#16500</a></li>
<li><a href="https://github.com/lvivski "><code>@lvivski</code></a> made
their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16491 ">webpack/webpack#16491</a></li>
<li><a
href="https://github.com/jakebailey "><code>@jakebailey</code></a> made
their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16614 ">webpack/webpack#16614</a></li>
<li><a
href="https://github.com/akhilgkrishnan "><code>@akhilgkrishnan</code></a>
made their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16446 ">webpack/webpack#16446</a></li>
<li><a
href="https://github.com/ryanwilsonperkin "><code>@ryanwilsonperkin</code></a>
made their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16703 ">webpack/webpack#16703</a></li>
<li><a href="https://github.com/piwysocki "><code>@piwysocki</code></a>
made their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16493 ">webpack/webpack#16493</a></li>
<li><a href="https://github.com/askoufis "><code>@askoufis</code></a>
made their first contribution in <a
href="https://redirect.github.com/webpack/webpack/pull/16781 ">webpack/webpack#16781</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0 ">https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="97b1718720https://redirect.github.com/webpack/webpack/issues/16781 ">#16781</a>
from askoufis/loader-context-target-type</li>
<li><a
href="b84efe6224https://redirect.github.com/webpack/webpack/issues/16759 ">#16759</a>
from ryanwilsonperkin/real-content-hash-regex-perf</li>
<li><a
href="c98e9e0014https://redirect.github.com/webpack/webpack/issues/16493 ">#16493</a>
from piwysocki/patch-1</li>
<li><a
href="5f34acfbc0b7fc4d876dhttps://redirect.github.com/webpack/webpack/issues/16703 ">#16703</a>
from ryanwilsonperkin/ryanwilsonperkin/fix-16160</li>
<li><a
href="63ea82da4d4ba225225bhttps://redirect.github.com/webpack/webpack/issues/16446 ">#16446</a>
from akhilgkrishnan/patch-1</li>
<li><a
href="1acd6350behttps://redirect.github.com/webpack/webpack/issues/16613 ">#16613</a>
from jakebailey/ts-logo</li>
<li><a
href="302eb37fe1https://redirect.github.com/webpack/webpack/issues/16614 ">#16614</a>
from jakebailey/html5-logo</li>
<li><a
href="cfdb1dfe59https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~evilebottnawi ">evilebottnawi</a>, a new
releaser for webpack since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/onnxruntime/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-23 15:17:52 -07:00
Yulong Wang
f972d21e81
[js] upgrade dependencies and enable strict mode ( #14930 )
...
### Description
This PR includes the following changes:
- upgrade js dependencies
- enable STRICT mode for web assembly build.
- corresponding fix for cmake-js upgrade
- corresponsing fix for linter upgrade
- upgrade default typescript compile option of:
- `moduleResolution`: from `node` to `node16`
- `target`: from `es2017` to `es2020`
- fix ESM module import in commonJS source file
## change explanation
### changes to onnxruntime_webassembly.cmake
`-s WASM=1` and `-s LLD_REPORT_UNDEFINED` in latest version is
by-default and deprecated.
### changes to onnxruntime_node.cmake
The npm package `cmake-js` updated its way to find file `node.lib`.
previously it downloads this file from Node.js public release channel,
and now it generates it from a definition file.
The node.js release channel does not contain a windows/arm64 version, so
previously cmake-js will fail to download `node.lib` for that platform.
this is why we made special handling to download the unofficial binary
to build. now this is no longer needed so we removed that from the cmake
file.
### changes to tsconfig.json
`node16` module resolution supports async import and `es2020` as target
supports top level await.
2023-03-22 15:05:04 -07:00
shalvamist
5c16e0befb
[web] utility functions for tensor<->image conversion in ORT web ( #13603 )
...
### Description
Data processing capabilities to ORT Web.
This PR will focus augmenting raw data to and from Tensors.
### Motivation and Context
Enabling different app building use cases to leverage ORT in a more
natural form.
Currently, the user needs to process the data and call Tensor
constructors - these util functions will provide a direct path to
generating ORT tensors.
Co-authored-by: shalvamist <shalva.mist@microsoft.com>
2023-01-12 09:05:18 -08:00
dependabot[bot]
bdeba4e31c
Bump json5 from 1.0.1 to 1.0.2 in /js ( #14109 )
2023-01-04 08:54:59 +00:00
Yulong Wang
cc0a6213e4
[js] update versions of a few build dependencies ( #13977 )
...
### Description
update versions of a few build dependencies for onnxruntime NPM
packages.
update nodejs version to v16.x in linux CI. v12 is too out-of-dated. see
[nodejs release
schedule](https://github.com/nodejs/release#release-schedule )
### Motivation and Context
- upgrade to latest webpack allows using of latest Node.js LTS version.
previous version of webpack does not work on Node.js v18 and it is fixed
in latest version
- upgrade to latest typescript, ts-loader and other dev deps to
accelerate the build and bundling.
- upgrade also helps to resolve security warnings that may be vulnerable
in out-of-dated version
2022-12-16 17:26:54 -08:00
Yulong Wang
2d732e9729
[js] [deps] upgrade minimatch@3.1.2 ( #13703 )
...
### Description
upgrade minimatch@3.1.2
### Motivation and Context
```
# npm audit report
minimatch <3.0.5
Severity: high
minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3
```
2022-11-18 22:27:57 -08:00
Yulong Wang
0c78b71352
prepare test folder from GitHub ( #12220 )
...
* consume onnx test data from github
* ensure tests
* update script and allow opset specification
* fix python format
* fix python format
* consume new filter format
* fix linting error
2022-07-20 22:01:08 -07:00
Yulong Wang
af21a04977
[js] upgrade async@3.2.3 /js/ ( #11421 )
...
* [js] upgrade async@3.2.3 /js/
* format code
2022-05-03 23:41:36 -07:00
Yulong Wang
8dcadba670
[js] aggregation of recent dependabot security warnings fix ( #11060 )
...
* update package-lock.json
* Bump minimist from 1.2.5 to 1.2.6 in /js/react_native
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases )
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump minimist from 1.2.5 to 1.2.6 in /js/react_native/e2e
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases )
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump plist from 3.0.4 to 3.0.5 in /js/react_native
Bumps [plist](https://github.com/TooTallNate/node-plist ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases )
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md )
- [Commits](https://github.com/TooTallNate/node-plist/commits )
---
updated-dependencies:
- dependency-name: plist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump ansi-regex from 4.1.0 to 4.1.1 in /js/react_native
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump plist from 3.0.4 to 3.0.5 in /js/react_native/e2e
Bumps [plist](https://github.com/TooTallNate/node-plist ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases )
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md )
- [Commits](https://github.com/TooTallNate/node-plist/commits )
---
updated-dependencies:
- dependency-name: plist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump ansi-regex from 4.1.0 to 4.1.1 in /js/react_native/e2e
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-31 02:06:04 -07:00
Yulong Wang
179406bd25
[JS] upgrade package-lock.json from v1 to v2 ( #11039 )
...
* upgrade package-lock.json from v1 to v2
* upgrade requirement of nodejs version to 16.x
2022-03-30 13:30:28 -07:00
dependabot[bot]
8dcd388ec5
Bump ansi-regex from 5.0.0 to 5.0.1 in /js
...
Bumps [ansi-regex](https://github.com/chalk/ansi-regex ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases )
- [Commits](https://github.com/chalk/ansi-regex/compare/v5.0.0...v5.0.1 )
---
updated-dependencies:
- dependency-name: ansi-regex
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-11-22 16:04:10 +00:00
dependabot[bot]
c779f2cad5
Bump path-parse from 1.0.6 to 1.0.7 in /js
...
Bumps [path-parse](https://github.com/jbgutierrez/path-parse ) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases )
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7 )
---
updated-dependencies:
- dependency-name: path-parse
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-11-22 16:03:45 +00:00
Sunghoon
e65f284476
[js/web] Support WebGL for ort format models in benchmarks ( #9661 )
...
* add p50 in test
* Support FusedConv in WebGL
* resolve comments
* add a comment for longToNumber change
Co-authored-by: Yulong Wang <yulongw@microsoft.com>
2021-11-09 11:58:47 -08:00
Yulong Wang
ec885040ef
[js] specify correct config for terser ( #7627 )
...
* add copyright banner
* fix worker loading failure
* add a section in document for formatter and linter
2021-05-10 11:50:39 -07:00
Yulong Wang
3600c3e66e
[js/web] integrate latest changes from onnxjs ( #7535 )
...
* [js/web] integrate latest changes from onnxjs
* apply ESLint rules: filename-case and header
* remove filename-case rule for wasm .d.ts
2021-05-03 15:03:25 -07:00
Yulong Wang
009f342caf
[JS] refactor Javascript/Typescript libraries in ONNX Runtime ( #7308 )
...
* working on re-organizing js code for ortweb
* remove dup files
* move folder
* fix common references
* fix common es5
* add webpack to common
* split interfact/impl
* use cjs for node
* add npmignore for common
* update sourcemap config for common
* update node
* adjust folder/path in CI and build
* update folder
* nit: readme
* add bundle for dev
* correct nodejs paths
* enable ORT_API_MANUAL_INIT
* set name for umd library
* correct name for commonjs export
* add priority into registerBackend()
* fix npm ci pwd
* update eslintrc
* revise code
* revert package-lock lockfileVersion 2->1
* update prebuild
* resolve comments
* update document
* revise eslint config
* update eslint for typescript rules
* revert changes by mistake in backend.ts
* add env
* resolve comments
2021-04-16 01:33:10 -07:00
