fixes #!shebang syntax when --bare is in effect by adding an unshebang phase to the pipeline
fixes the behavior for multiple external bundles
fixes a circular dependency issue with readable-stream
allows transforms to be ignored throughout the entire bundle
fixes a bug where module insert-module-globals would trigger too soon and conflict with other transforms
browserify#867 browserify#895 browserify#855
upgrades process to 0.8.0 browserify#906
respects opts.expose in require() browserify#907
resolves source map maths relative to the base url. This should help with more reproducible builds.
bails early if opts.basedir is not the correct type browserify#927
exposes global browserify options to transforms under opts._flags browserify#910
fixes the array form of b.external() browserify#930
dedupe deps when fullPaths is on browserify#917 and fixes the crypto tests
adds back the array form for add() and require(), with extra places to add options
fixes ignore for relative paths in browserify#896
fixes exports across resets, which caused issues for watchify with exports browserify#892
adds an implicit dependency on the original module during dedupe browserify#880
fixes the command-line client to properly ignore paths that don't match a glob browserify#866
adds back support for .external(b) on a browserify instance b
that was dropped on the v5 refactor
buffers the record pipeline phase to start outputting after the first tick so that user plugins can capture and modify recorder output
fixes a bug with using --ignore to exclude node_modules packages on the command-line
improves the detection for --ignore
fixes bug with builtins that load json files (the 'constants' module), new 'json' pipeline label
allow optional extensions in bin/args
re-instates transforms after a reset and fixes exposing the transform events properly
makes stream entry files deterministic
adds 'package' events from module-deps when a package.json file is read
adds back the 'bundle' event and copies over options correctly to reset()
adds a note about derequire in standalone mode to the readme
fixes an error with basedir resolving plugins from names
also allows opts.plugin from the constructor like transform
passes .file on stream inputs through to transforms
browserify#744
sets require() for streams to not just be entry files
upgrades crypto-browserify to v3
updates --list to always print file paths
adds back .plugin() which was mistakenly omitted
fixes using debug and standalone at the same time browserify#750
fixes command-line versions of -u and -x browserify#821
test for --bare
fix for detectGlobals, --bare browserify#803
fixes --no-bundle-external with globals
upgrades insert-module-globals to fix browserify#834
fixes the changelog link browserify#835
adds an untracked test
At a glance:
- extensible internal labeled-stream-splicer pipeline
- bundle() - no longer accepts
opts, callback gets a buffer - b.deps(), b.pack(), opts.pack, opts.deps are gone
- can call bundle() multiple times on the same instance
- a better --noparse matcher
- id labeling integer index based instead of hash based
- derequire removed for performance reasons
- .external(bundle) has been removed (for now)
- semicolon at end of output
- hashing is gone so
expose: trueor explicit expose id is required for doing multi-export bundles
In more depth: doc/changelog/5_0.markdown.
reverts 4.2.2 due to breaking some existing use-cases
fixes a bug applying transforms to symlinked files by resolving the realpath first browserify#831
SECURITY NOTICE
Make sure your installation of browserify is using [email protected] or later. there was a security vulnerability where a malicious file could execute code when browserified.
The vulnerability involves breaking out of Function(), which was used to
check syntax for more informative errors. In node 0.10, Function() seems
to be implemented in terms of eval(), so malicious code can execute even
if the function returned by Function() was never called. node 0.11 does
not appear to be vulnerable.
Thanks to Cal Leeming [[email protected]] for discovering and disclosing this bug!
upgrades http-browserify, crypto-browserify, and sets more versions to float with ^ semvers
fixes a bug with transform argument handling browserify#795
upgrades browser-resolve to get opts.path fixes browserify/browser-resolve#43
upgrades resolve to fix relative NODE_PATH paths browserify/resolve#46
bumps the module-deps version to get an ordering bugfix browserify/module-deps#39 browserify#774
fixes ignoreMissing when set in the constructor browserify#785
emits the 'id' event on the correct instance browserify#780
added this document
fixes a bug in ie<=8 support for querystring browserify#764
upgrades umd to fix some issues with --standalone browserify#714
makes deps() behave more like bundle() browserify#757 and fixes global transform precedence browserify#759
upgrades the version of buffer to ^2.3.0
4.0 is hot off the presses. See [doc/changelog/4_0.markdown].
fixes a bug exposing the host path of the process module in the bundle output browserify/insert-module-globals#32
allows array arguments in b.require(), b.add(), and b.external() browserify#742 from @spacepluk
renders complete stack traces where before they were getting truncated browserify#741 patch from @secoif
slims down the dependency payload by 20M browserify#736
fixes the recursion error many people were getting browserify#713 Thanks to @MattMcKegg for isolating the bug!
upgrades module-deps to 1.10.0 to make all the packageFilter dir argument pathways are consistent
lets b.transform(opts, t) args to be swapped around since opts is more common as a last argument
passes through the dir parameter in opts.packageFilter from module-deps 1.10.0 browserify#731
has an option to disable external files, making it easier to run bundles in node for code coverage browserify#672
makes --list work again browserify#727
merges a patch for piping via stdin and --require at the same time browserify#728
upgrades module-deps to fix --list for $NODE_PATH browserify#726
upgrades module-deps to get this packageTransform bugfix browserify/module-deps#32
modifies the behavior of opts.builtins to be more useful and intuitive browserify#717
adds a zlib that has parity with node browserify#721
upgrades derequire which uses esprima-fb browserify#710
adds 'close' events back to the bundle stream. This should fix some issues with watchify.
fixes a bug with through being required in the bin/cmd.js instead of through2
also reverts that require('process') thing which was mistakenly briefly put in the builtins list
gives streams2 semantics for bundle() browserify#646
fixes a dumb bug with ^ for versions that don't work in old npm clients
adds require('process') and removes the path resolution for process out of insert-module-globals
adds an empty tls stub to the builtins list browserify#703
fixes a bug with transforms not being applied in deps() browserify#708
fixes a bug with options in --global-transform on the command-line browserify#705
fixes parsing errors while maintaining es6 support by switching to esprima-fb browserify#698
should be easier to shinkwrap and install on windows browserify#684
adds --full-path and opts.fullPath to always expand ids to full paths browserify#668 (comment)
fixes a bug in the subarg argument parsing for multiple transforms browserify#678
uses process.cwd() as the default rebase target instead of commondir browserify#669 (comment)
merges browserify#669 which should help with more deterministic builds across systems
fixes parsing the --insert-global-vars argument properly browserify#674
fixes exclude globbing in the arg parser browserify#676
included a fix for --no-builtins for non-wrapped modules browserify#666
upgrades buffer for a utf8 fix browserify#656
adds globs for -u, -i, and -x browserify#654
adds relatively-resolved paths to ignored and excluded files
upgrades http-browserify to 1.3.1
now always includes the full package.json content in the 'package' event
fixes a bug with stream entry order browserify#643
adds plugins for doing super fancy things like factored bundle output https://github.com/substack/node-browserify#plugins
fixes a bug resolving transform modules when browserify is under a symlink
adds transform configuration in the package.json browserify.transform field https://github.com/substack/module-deps#packagejson-transformkey
you can pass arguments to transforms https://github.com/substack/node-browserify/blob/master/bin/advanced.txt#L67-L77
fixes a bug where the transform event didn't fire while IO was pending
fixes the transform docs
adds 'bundle' and 'transform' events https://github.com/substack/node-browserify#bonbundle-function-bundle-
upgrades derequire to 0.6.0. That should be the last piece needed for full es6 syntax support.
expands the documentation for the package.json browser and browserify.transform fields https://github.com/substack/node-browserify#packagejson
fixes generator syntax and other es6-isms in browserify browserify#614
fixes noParse, which had accidentally been disabled in the insert-module-global changes and also closes browserify#504
similar to 3.24.5, 3.24.6 fixes some error reporting propagation from the browserify command
fixes how require('buffer').Buffer wasn't the same as implicit Buffer browserify#612
fixes where the output stream didn't emit "close" in standalone mode browserify#608
fixes an issue where --standalone combined with expose caused a syntax error browserify#489
removes require() calls from --standalone so you can require() a standalone bundle again
merges this tiny fix returning this in noParse() browserify#592
merges browserify#587 which changes the source map prefix from //@ to //#
standardizes the module missing error formats to have filename, parent, and type === 'not found' fields
has a fix for the case where stdin is implicitly treated as the input stream instead of a file
3.20.0 is out: parity with how $NODE_PATH works in node browserify#593
restores support for node 0.8 by upgrading concat-stream