browserslist 4.13.0 → 4.14.0

package/CHANGELOG.md

@@ -1,6 +1,9 @@
 # Change Log
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## 4.14
+* Add `BROWSERSLIST_DANGEROUS_EXTEND` support (by Timo Mayer).
+
 ## 4.13
 * Added `supports` query to select browsers (by Jesús Leganés-Combarro).
 

package/README.md

@@ -164,7 +164,9 @@ An `or` combiner can use the keyword `or` as well as `,`.
 `last 1 version or > 1%` is equal to `last 1 version, > 1%`.
 
 `and` query combinations are also supported to perform an
-intersection of the previous query: `last 1 version and > 1%`.
+intersection of all the previous queries:
+`last 1 version or chrome > 75 and > 1%` will select
+(`browser last version` or `Chrome since 76`) and `more than 1% marketshare`.
 
 There is 3 different ways to combine queries as depicted below. First you start
 with a single query and then we combine the queries to get our final list.
@@ -173,8 +175,6 @@ Obviously you can *not* start with a `not` combiner, since there is no left-hand
 side query to combine it with. The left-hand is always resolved as `and`
 combiner even if `or` is used (this is an API implementation specificity).
 
-`and` combiner has precedence over `or` combiner.
-
 | Query combiner type | Illustration | Example |
 | ------------------- | :----------: | ------- |
 |`or`/`,` combiner <br> (union) | ![Union of queries](img/union.svg)  | `> .5% or last 2 versions` <br> `> .5%, last 2 versions` |
@@ -223,8 +223,8 @@ You can specify the browser and Node.js versions by queries (case insensitive):
     to PhantomJS runtime.
 * `extends browserslist-config-mycompany`: take queries from
   `browserslist-config-mycompany` npm package.
-* `supports rtcpeerconnection`: browsers with support for specific features.
-  `rtcpeerconnection` here is the `feat` parameter at the URL of the [Can I Use]
+* `supports es6-module`: browsers with support for specific features.
+  `es6-module` here is the `feat` parameter at the URL of the [Can I Use]
   page. A list of all available features can be found at
   [`caniuse-lite/data/features`].
 * `since 2015` or `last 2 years`: all versions released since year 2015
@@ -579,32 +579,39 @@ with [environment variables]:
 * `BROWSERSLIST` with browsers queries.
 
    ```sh
-  BROWSERSLIST="> 5%" gulp css
+  BROWSERSLIST="> 5%" npx webpack
    ```
 
 * `BROWSERSLIST_CONFIG` with path to config file.
 
    ```sh
-  BROWSERSLIST_CONFIG=./config/browserslist gulp css
+  BROWSERSLIST_CONFIG=./config/browserslist npx webpack
    ```
 
 * `BROWSERSLIST_ENV` with environments string.
 
    ```sh
-  BROWSERSLIST_ENV="development" gulp css
+  BROWSERSLIST_ENV="development" npx webpack
    ```
 
 * `BROWSERSLIST_STATS` with path to the custom usage data
   for `> 1% in my stats` query.
 
    ```sh
-  BROWSERSLIST_STATS=./config/usage_data.json gulp css
+  BROWSERSLIST_STATS=./config/usage_data.json npx webpack
    ```
 
 * `BROWSERSLIST_DISABLE_CACHE` if you want to disable config reading cache.
 
    ```sh
-  BROWSERSLIST_DISABLE_CACHE=1 gulp css
+  BROWSERSLIST_DISABLE_CACHE=1 npx webpack
+   ```
+
+* `BROWSERSLIST_DANGEROUS_EXTEND` to disable security shareable config
+  name check.
+
+   ```sh
+  BROWSERSLIST_DANGEROUS_EXTEND=1 npx webpack
    ```
 
 [environment variables]: https://en.wikipedia.org/wiki/Environment_variable

package/node.js

@@ -153,8 +153,10 @@ function normalizeUsageData (usageData, data) {
 }
 
 module.exports = {
-  loadQueries: function loadQueries (context, name) {
-    if (!context.dangerousExtend) checkExtend(name)
+  loadQueries: function loadQueries (ctx, name) {
+    if (!ctx.dangerousExtend && !process.env.BROWSERSLIST_DANGEROUS_EXTEND) {
+      checkExtend(name)
+    }
     // eslint-disable-next-line security/detect-non-literal-require
     var queries = require(require.resolve(name, { paths: ['.'] }))
     if (queries) {
@@ -162,7 +164,7 @@ module.exports = {
         return queries
       } else if (typeof queries === 'object') {
         if (!queries.defaults) queries.defaults = []
-        return pickEnv(queries, context, name)
+        return pickEnv(queries, ctx, name)
       }
     }
     throw new BrowserslistError(
@@ -171,8 +173,10 @@ module.exports = {
     )
   },
 
-  loadStat: function loadStat (context, name, data) {
-    if (!context.dangerousExtend) checkExtend(name)
+  loadStat: function loadStat (ctx, name, data) {
+    if (!ctx.dangerousExtend && !process.env.BROWSERSLIST_DANGEROUS_EXTEND) {
+      checkExtend(name)
+    }
     // eslint-disable-next-line security/detect-non-literal-require
     var stats = require(
       require.resolve(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browserslist",
-  "version": "4.13.0",
+  "version": "4.14.0",
   "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
   "keywords": [
     "caniuse",
@@ -15,10 +15,10 @@
   "license": "MIT",
   "repository": "browserslist/browserslist",
   "dependencies": {
-    "caniuse-lite": "^1.0.30001093",
-    "electron-to-chromium": "^1.3.488",
-    "escalade": "^3.0.1",
-    "node-releases": "^1.1.58"
+    "caniuse-lite": "^1.0.30001111",
+    "electron-to-chromium": "^1.3.523",
+    "escalade": "^3.0.2",
+    "node-releases": "^1.1.60"
   },
   "engines": {
     "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"