Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: arduino/arduino-ide
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 2.3.0
Choose a base ref
...
head repository: arduino/arduino-ide
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 2.3.1
Choose a head ref
  • 6 commits
  • 46 files changed
  • 4 contributors

Commits on Feb 14, 2024

  1. chore: switch to version 2.3.1 after the release 

    To produce a correctly versioned nightly build.
See the [docs](https://github.com/arduino/arduino-ide/blob/1b9c7e93e029e65765010eb84e1604b5e483a963/docs/internal/release-procedure.md#7-%EF%B8%8F-bump-version-metadata-of-packages) for more details.

Signed-off-by: Akos Kitta <a.kitta@arduino.cc>
    Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    11da49a View commit details
    Browse the repository at this point in the history

  2. build(deps): Bump arduino/setup-task from 1 to 2 

    Bumps [arduino/setup-task](https://github.com/arduino/setup-task) from 1 to 2.
- [Release notes](https://github.com/arduino/setup-task/releases)
- [Commits](arduino/setup-task@v1...v2)

---
updated-dependencies:
- dependency-name: arduino/setup-task
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] authored and Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    958e159 View commit details
    Browse the repository at this point in the history

  3. Use arduino/setup-task@v1 action for Linux build job 

    Unfortunately the latest v2 version of the arduino/setup-task action used to install the Task task runner tool in the
runner machine has a dependency on a higher version of glibc than is provided by the Linux container. For this reason,
the workflow is configured to use arduino/setup-task@v1 for the Linux build job.

We will receive pull requests from Dependabot offering to update this outdated action dependency at each subsequent
major version release of the action (which are not terribly frequent). We must decline the bump of the action in that
specific step, but we can accept the bumps of all other usages of the action in the workflows. Dependabot remembers when
you decline a bump so this should not be too bothersome.
    @per1234
    per1234 authored and Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    8c1ffe9 View commit details
    Browse the repository at this point in the history

  4. fix: debug widget layout updates 

    Use customized `PanelLayout#removeWidget` and
`PanelLayout#insertWidget` logic for the layout
updates. The customized functions ensure no side
effect if adding/removing the widget to/from the
layout but it's already present/absent.

Unlike the default [`PanelLayout#removeWidget`](https://github.com/phosphorjs/phosphor/blob/9f5e11025b62d2c4a6fb59e2681ae1ed323dcde4/packages/widgets/src/panellayout.ts#L154-L156)
behavior, do not try to remove the widget if it's
not present (has a negative index). Otherwise,
required widgets might be removed based on the
default [`ArrayExt#removeAt`](https://github.com/phosphorjs/phosphor/blob/9f5e11025b62d2c4a6fb59e2681ae1ed323dcde4/packages/algorithm/src/array.ts#L1075-L1077)
behavior.

Closes: #2354

Signed-off-by: Akos Kitta <a.kitta@arduino.cc>
    Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    470db56 View commit details
    Browse the repository at this point in the history

  5. fix(security): update all vulnerable dependencies 

    Resolutions:
 - `nano@^10.1.3`,
 - `msgpackr@^1.10.1`,
 - `axios@^1.6.7`

Fixes:
 - [GHSA-wf5p-g6vw-rhxx](GHSA-wf5p-g6vw-rhxx) (`CVE-2023-45857`)
 - [GHSA-jchw-25xp-jwwc](GHSA-jchw-25xp-jwwc) (`CVE-2023-26159`)
 - [GHSA-7hpj-7hhx-2fgx](GHSA-7hpj-7hhx-2fgx) (`CVE-2023-52079`)

Ref: nrwl/nx#20493
Ref: eclipse-theia/theia#13365

Signed-off-by: Akos Kitta <a.kitta@arduino.cc>
    Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    bb1dc74 View commit details
    Browse the repository at this point in the history

  6. Updated translation files

    @github-actions
    github-actions[bot] authored and Akos Kitta committed Feb 14, 2024
    Configuration menu
    Copy the full SHA
    c54fbc8 View commit details
    Browse the repository at this point in the history
Loading