browserslist 4.12.2 → 4.14.2

package/CHANGELOG.md

@@ -1,19 +1,33 @@
 # Change Log
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## 4.14.2
+* Fixed `--update-db` on Windows (by James Ross).
+* Improved `--update-db` output.
+
+## 4.14.1
+* Added `--update-db` explanation (by Justin Zelinsky).
+
+## 4.14
+* Add `BROWSERSLIST_DANGEROUS_EXTEND` support (by Timo Mayer).
+
+## 4.13
+* Added `supports` query to select browsers (by Jesús Leganés-Combarro).
+
 ## 4.12.2
 * Update Firefox ESR.
 
 ## 4.12.1
 * Update `package.json` scanning tool for `--update-db` (by Luke Edwards).
 * Improve docs (by Mukundan Senthil).
+* Drop Node.js 13.0-13.6 support because of ES modules bug in that versions.
 
 ## 4.12
 * Add environments to shared configs (by Yevgeny Petukhov).
 * Fix docs (by Dmitry Statsenko and Thomas Pozzo di Borgo).
 
 ## 4.11.1
-* FIx Node.js 6 support.
+* Fix Node.js 6 support.
 
 ## 4.11
 * Add `npx browserslist --mobile-to-desktop` (by James Ross).

package/README.md

@@ -70,6 +70,7 @@ Browserslist will take queries from tool option,
 
 * [Tools](#tools)
 * [Best Practices](#best-practices)
+* [Browsers Data Updating](#browsers-data-updating)
 * [Queries](#queries)
   * [Query Composition](#query-composition)
   * [Full List](#full-list)
@@ -143,6 +144,46 @@ Browserslist will take queries from tool option,
   and desktop Safari combined.
 
 
+## Browsers Data Updating
+
+`npx browserslist@latest --update-db` updates `caniuse-lite` version
+in your npm, yarn or pnpm lock file.
+
+You need to do it regularly for two reasons:
+
+1. To use the latest browser’s versions and statistics in queries like
+   `last 2 versions` or `>1%`. For example, if you created your project
+   2 years ago and did not update your dependencies, `last 1 version`
+   will return 2 year old browsers.
+2. `caiuse-lite` deduplication: to synchronize version in different tools.
+
+> What is deduplication?
+
+Due to how npm architecture is setup, you may have a situation
+where you have multiple versions of a single dependency required.
+
+Imagine you begin a project, and you add `autoprefixer` as a dependency.
+npm looks for the latest `caniuse-lite` version (1.0.30000700) and adds it to
+`package-lock.json` under `autoprefixer` dependencies.
+
+A year later, you decide to add Babel. At this moment, we have a
+new version of `canuse-lite` (1.0.30000900). npm took the latest version
+and added it to your lock file under `@babel/preset-env` dependencies.
+
+Now your lock file looks like this:
+
+```ocaml
+autoprefixer 7.1.4
+  browserslist 3.1.1
+    caniuse-lite 1.0.30000700
+@babel/preset-env 7.10.0
+  browserslist 4.13.0
+    caniuse-lite 1.0.30000900
+```
+
+As you can see, we now have two versions of `caniuse-lite` installed.
+
+
 ## Queries
 
 Browserslist will use browsers and Node.js versions query
@@ -164,7 +205,9 @@ An `or` combiner can use the keyword `or` as well as `,`.
 `last 1 version or > 1%` is equal to `last 1 version, > 1%`.
 
 `and` query combinations are also supported to perform an
-intersection of the previous query: `last 1 version and > 1%`.
+intersection of all the previous queries:
+`last 1 version or chrome > 75 and > 1%` will select
+(`browser last version` or `Chrome since 76`) and `more than 1% marketshare`.
 
 There is 3 different ways to combine queries as depicted below. First you start
 with a single query and then we combine the queries to get our final list.
@@ -173,8 +216,6 @@ Obviously you can *not* start with a `not` combiner, since there is no left-hand
 side query to combine it with. The left-hand is always resolved as `and`
 combiner even if `or` is used (this is an API implementation specificity).
 
-`and` combiner has precedence over `or` combiner.
-
 | Query combiner type | Illustration | Example |
 | ------------------- | :----------: | ------- |
 |`or`/`,` combiner <br> (union) | ![Union of queries](img/union.svg)  | `> .5% or last 2 versions` <br> `> .5%, last 2 versions` |
@@ -184,7 +225,6 @@ combiner even if `or` is used (this is an API implementation specificity).
 _A quick way to test your query is to do `npx browserslist '> 0.5%, not IE 11'`
 in your terminal._
 
-
 ### Full List
 
 You can specify the browser and Node.js versions by queries (case insensitive):
@@ -193,45 +233,51 @@ You can specify the browser and Node.js versions by queries (case insensitive):
   (`> 0.5%, last 2 versions, Firefox ESR, not dead`).
 * `> 5%`: browsers versions selected by global usage statistics.
   `>=`, `<` and `<=` work too.
-* `> 5% in US`: uses USA usage statistics. It accepts [two-letter country code].
-* `> 5% in alt-AS`: uses Asia region usage statistics. List of all region codes
-  can be found at [`caniuse-lite/data/regions`].
-* `> 5% in my stats`: uses [custom usage data].
-* `> 5% in browserslist-config-mycompany stats`: uses [custom usage data]
-  from `browserslist-config-mycompany/browserslist-stats.json`.
-* `cover 99.5%`: most popular browsers that provide coverage.
-* `cover 99.5% in US`: same as above, with [two-letter country code].
-* `cover 99.5% in my stats`: uses [custom usage data].
-* `maintained node versions`: all Node.js versions, which are [still maintained]
-  by Node.js Foundation.
+  * `> 5% in US`: uses USA usage statistics.
+    It accepts [two-letter country code].
+  * `> 5% in alt-AS`: uses Asia region usage statistics.
+    List of all region codes can be found at [`caniuse-lite/data/regions`].
+  * `> 5% in my stats`: uses [custom usage data].
+  * `> 5% in browserslist-config-mycompany stats`: uses [custom usage data]
+    from `browserslist-config-mycompany/browserslist-stats.json`.
+  * `cover 99.5%`: most popular browsers that provide coverage.
+  * `cover 99.5% in US`: same as above, with [two-letter country code].
+  * `cover 99.5% in my stats`: uses [custom usage data].
+* `dead`: browsers without official support or updates for 24 months.
+  Right now it is `IE 10`, `IE_Mob 11`, `BlackBerry 10`, `BlackBerry 7`,
+  `Samsung 4` and `OperaMobile 12.1`.
+* `last 2 versions`: the last 2 versions for *each* browser.
+  * `last 2 Chrome versions`: the last 2 versions of Chrome browser.
+  * `last 2 major versions` or `last 2 iOS major versions`:
+    all minor/patch releases of last 2 major versions.
 * `node 10` and `node 10.4`: selects latest Node.js `10.x.x`
   or `10.4.x` release.
-* `current node`: Node.js version used by Browserslist right now.
+  * `current node`: Node.js version used by Browserslist right now.
+  * `maintained node versions`: all Node.js versions, which are [still maintained]
+    by Node.js Foundation.
+* `iOS 7`: the iOS browser version 7 directly.
+  * `Firefox > 20`: versions of Firefox newer than 20.
+    `>=`, `<` and `<=` work too. It also works with Node.js.
+  * `ie 6-8`: selects an inclusive range of versions.
+  * `Firefox ESR`: the latest [Firefox ESR] version.
+  * `PhantomJS 2.1` and `PhantomJS 1.9`: selects Safari versions similar
+    to PhantomJS runtime.
 * `extends browserslist-config-mycompany`: take queries from
   `browserslist-config-mycompany` npm package.
-* `ie 6-8`: selects an inclusive range of versions.
-* `Firefox > 20`: versions of Firefox newer than 20.
-  `>=`, `<` and `<=` work too. It also works with Node.js.
-* `iOS 7`: the iOS browser version 7 directly.
-* `Firefox ESR`: the latest [Firefox ESR] version.
-* `PhantomJS 2.1` and `PhantomJS 1.9`: selects Safari versions similar
-  to PhantomJS runtime.
-* `unreleased versions` or `unreleased Chrome versions`:
-  alpha and beta versions.
-* `last 2 major versions` or `last 2 iOS major versions`:
-  all minor/patch releases of last 2 major versions.
+* `supports es6-module`: browsers with support for specific features.
+  `es6-module` here is the `feat` parameter at the URL of the [Can I Use]
+  page. A list of all available features can be found at
+  [`caniuse-lite/data/features`].
 * `since 2015` or `last 2 years`: all versions released since year 2015
   (also `since 2015-03` and `since 2015-03-10`).
-* `dead`: browsers without official support or updates for 24 months.
-  Right now it is `IE 10`, `IE_Mob 11`, `BlackBerry 10`, `BlackBerry 7`,
-  `Samsung 4` and `OperaMobile 12.1`.
-* `last 2 versions`: the last 2 versions for *each* browser.
-* `last 2 Chrome versions`: the last 2 versions of Chrome browser.
+* `unreleased versions` or `unreleased Chrome versions`:
+  alpha and beta versions.
 * `not ie <= 8`: exclude browsers selected by previous queries.
 
 You can add `not ` to any query.
 
 [`caniuse-lite/data/regions`]: https://github.com/ben-eb/caniuse-lite/tree/master/data/regions
+[`caniuse-lite/data/features`]: https://github.com/ben-eb/caniuse-lite/tree/master/data/features
 [two-letter country code]:     https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Officially_assigned_code_elements
 [custom usage data]:           #custom-usage-data
 [still maintained]:            https://github.com/nodejs/Release
@@ -349,10 +395,11 @@ naming or prefixing the module with `@scope/browserslist-config`, such as
 `@scope/browserslist-config` or `@scope/browserslist-config-mycompany`.
 
 If you don’t accept Browserslist queries from users, you can disable the
-validation by using the `dangerousExtend` option:
+validation by using the or `BROWSERSLIST_DANGEROUS_EXTEND` environment variable
+or `dangerousExtend` option.
 
-```js
-browserslist(queries, { path, dangerousExtend: true })
+```sh
+BROWSERSLIST_DANGEROUS_EXTEND=1 npx webpack
 ```
 
 Because this uses `npm`'s resolution, you can also reference specific files
@@ -574,32 +621,39 @@ with [environment variables]:
 * `BROWSERSLIST` with browsers queries.
 
    ```sh
-  BROWSERSLIST="> 5%" gulp css
+  BROWSERSLIST="> 5%" npx webpack
    ```
 
 * `BROWSERSLIST_CONFIG` with path to config file.
 
    ```sh
-  BROWSERSLIST_CONFIG=./config/browserslist gulp css
+  BROWSERSLIST_CONFIG=./config/browserslist npx webpack
    ```
 
 * `BROWSERSLIST_ENV` with environments string.
 
    ```sh
-  BROWSERSLIST_ENV="development" gulp css
+  BROWSERSLIST_ENV="development" npx webpack
    ```
 
 * `BROWSERSLIST_STATS` with path to the custom usage data
   for `> 1% in my stats` query.
 
    ```sh
-  BROWSERSLIST_STATS=./config/usage_data.json gulp css
+  BROWSERSLIST_STATS=./config/usage_data.json npx webpack
    ```
 
 * `BROWSERSLIST_DISABLE_CACHE` if you want to disable config reading cache.
 
    ```sh
-  BROWSERSLIST_DISABLE_CACHE=1 gulp css
+  BROWSERSLIST_DISABLE_CACHE=1 npx webpack
+   ```
+
+* `BROWSERSLIST_DANGEROUS_EXTEND` to disable security shareable config
+  name check.
+
+   ```sh
+  BROWSERSLIST_DANGEROUS_EXTEND=1 npx webpack
    ```
 
 [environment variables]: https://en.wikipedia.org/wiki/Environment_variable

package/browser.js

@@ -21,10 +21,15 @@ module.exports = {
 
   loadCountry: function loadCountry () {
     throw new BrowserslistError(
-      'Country statistics is not supported ' +
+      'Country statistics are not supported ' +
       'in client-side build of Browserslist')
   },
 
+  loadFeature: function loadFeature () {
+    throw new BrowserslistError(
+      'Supports queries are not available in client-side build of Browserslist')
+  },
+
   currentNode: function currentNode (resolve, context) {
     return resolve(['maintained node versions'], context)[0]
   },

package/index.js

@@ -505,6 +505,7 @@ function flatten (array) {
 }
 
 // Will be filled by Can I Use data below
+browserslist.cache = { }
 browserslist.data = { }
 browserslist.usage = {
   global: { },
@@ -887,6 +888,20 @@ var QUERIES = [
       return result
     }
   },
+  {
+    regexp: /^supports\s+([\w-]+)$/,
+    select: function (context, feature) {
+      env.loadFeature(browserslist.cache, feature)
+      var features = browserslist.cache[feature]
+      return Object.keys(features).reduce(function (result, version) {
+        var flags = features[version]
+        if (flags.indexOf('y') >= 0 || flags.indexOf('a') >= 0) {
+          result.push(version)
+        }
+        return result
+      }, [])
+    }
+  },
   {
     regexp: /^electron\s+([\d.]+)\s*-\s*([\d.]+)$/i,
     select: function (context, from, to) {

package/node.js

@@ -1,3 +1,4 @@
+var feature = require('caniuse-lite/dist/unpacker/feature').default
 var region = require('caniuse-lite/dist/unpacker/region').default
 var path = require('path')
 var fs = require('fs')
@@ -152,8 +153,10 @@ function normalizeUsageData (usageData, data) {
 }
 
 module.exports = {
-  loadQueries: function loadQueries (context, name) {
-    if (!context.dangerousExtend) checkExtend(name)
+  loadQueries: function loadQueries (ctx, name) {
+    if (!ctx.dangerousExtend && !process.env.BROWSERSLIST_DANGEROUS_EXTEND) {
+      checkExtend(name)
+    }
     // eslint-disable-next-line security/detect-non-literal-require
     var queries = require(require.resolve(name, { paths: ['.'] }))
     if (queries) {
@@ -161,7 +164,7 @@ module.exports = {
         return queries
       } else if (typeof queries === 'object') {
         if (!queries.defaults) queries.defaults = []
-        return pickEnv(queries, context, name)
+        return pickEnv(queries, ctx, name)
       }
     }
     throw new BrowserslistError(
@@ -170,8 +173,10 @@ module.exports = {
     )
   },
 
-  loadStat: function loadStat (context, name, data) {
-    if (!context.dangerousExtend) checkExtend(name)
+  loadStat: function loadStat (ctx, name, data) {
+    if (!ctx.dangerousExtend && !process.env.BROWSERSLIST_DANGEROUS_EXTEND) {
+      checkExtend(name)
+    }
     // eslint-disable-next-line security/detect-non-literal-require
     var stats = require(
       require.resolve(
@@ -237,6 +242,21 @@ module.exports = {
     }
   },
 
+  loadFeature: function loadFeature (features, name) {
+    name = name.replace(/[^\w-]/g, '')
+    if (features[name]) return
+
+    // eslint-disable-next-line security/detect-non-literal-require
+    var compressed = require('caniuse-lite/data/features/' + name + '.js')
+    var stats = feature(compressed).stats
+    features[name] = { }
+    for (var i in stats) {
+      for (var j in stats[i]) {
+        features[name][i + ' ' + j] = stats[i][j]
+      }
+    }
+  },
+
   parseConfig: function parseConfig (string) {
     var result = { defaults: [] }
     var sections = ['defaults']
@@ -337,6 +357,8 @@ module.exports = {
     dataTimeChecked = false
     filenessCache = { }
     configCache = { }
+
+    this.cache = { }
   },
 
   oldDataWarning: function oldDataWarning (agentsObj) {
@@ -350,7 +372,10 @@ module.exports = {
     if (latest !== 0 && latest < halfYearAgo) {
       console.warn(
         'Browserslist: caniuse-lite is outdated. Please run:\n' +
-        'npx browserslist@latest --update-db'
+        'npx browserslist@latest --update-db\n' +
+        '\n' +
+        'Why you should do it regularly:\n' +
+        'https://github.com/browserslist/browserslist#browsers-data-updating'
       )
     }
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browserslist",
-  "version": "4.12.2",
+  "version": "4.14.2",
   "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
   "keywords": [
     "caniuse",
@@ -15,10 +15,10 @@
   "license": "MIT",
   "repository": "browserslist/browserslist",
   "dependencies": {
-    "caniuse-lite": "^1.0.30001088",
-    "electron-to-chromium": "^1.3.483",
-    "escalade": "^3.0.1",
-    "node-releases": "^1.1.58"
+    "caniuse-lite": "^1.0.30001125",
+    "electron-to-chromium": "^1.3.564",
+    "escalade": "^3.0.2",
+    "node-releases": "^1.1.61"
   },
   "engines": {
     "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"

package/update-db.js

@@ -47,13 +47,13 @@ function getCurrentVersion (lock) {
       return dependencies['caniuse-lite'].version
     }
   } else if (lock.mode === 'yarn') {
-    match = /caniuse-lite@[^:]+:\n\s+version\s+"([^"]+)"/.exec(lock.content)
+    match = /caniuse-lite@[^:]+:\r?\n\s+version\s+"([^"]+)"/.exec(lock.content)
     if (match[1]) return match[1]
   }
   return null
 }
 
-function getLastestInfo () {
+function getLatestInfo () {
   return JSON.parse(
     childProcess.execSync('npm show caniuse-lite --json').toString()
   )
@@ -119,18 +119,29 @@ module.exports = function updateDB (print) {
   lock.content = fs.readFileSync(lock.file).toString()
 
   var current = getCurrentVersion(lock)
-  var latest = getLastestInfo()
+  var latest = getLatestInfo()
 
   if (typeof current === 'string') {
     print('Current version: ' + current + '\n')
   }
   print(
     'New version: ' + latest.version + '\n' +
-    'Updating caniuse-lite…\n'
+    'Removing old caniuse-lite from lock file…\n'
   )
 
   fs.writeFileSync(lock.file, updateLockfile(lock, latest))
-  childProcess.execSync(lock.mode + ' install')
 
-  print('caniuse-lite has been successfully updated')
+  print(
+    'Installing new caniuse-lite version…\n' +
+    '$ ' + lock.mode + ' install\n'
+  )
+  try {
+    childProcess.execSync(lock.mode + ' install')
+  } catch (e) /* istanbul ignore next */ {
+    print(e.stack)
+    print('\nProblem with `' + lock.mode + ' install` call. Run it manually.\n')
+    process.exit(1)
+  }
+
+  print('caniuse-lite has been successfully updated\n')
 }