Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update app dependencies (canary) #2354

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 23, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@astrojs/react (source) ^4.1.1 -> ^4.1.2 age adoption passing confidence
@astrojs/tailwind (source) ^5.1.3 -> ^5.1.4 age adoption passing confidence
@fontsource/fira-mono (source) ^5.1.0 -> ^5.1.1 age adoption passing confidence
@next/bundle-analyzer (source) 15.0.0-canary.202 -> 15.1.1-canary.25 age adoption passing confidence
@nuxt/devtools (source) ^1.6.4 -> ^1.7.0 age adoption passing confidence
@nuxtjs/sanity ^1.13.2 -> ^1.13.3 age adoption passing confidence
@portabletext/react ^3.1.0 -> ^3.2.0 age adoption passing confidence
@react-three/drei ^9.120.4 -> ^9.120.5 age adoption passing confidence
@remix-run/css-bundle (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/dev (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/dev (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/eslint-config (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/node (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/node (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/react (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/react (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/serve (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/serve (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@sanity/cli (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
@sanity/image-url (source) ^1.0.2 -> ^1.1.0 age adoption passing confidence
@sanity/ui (source) 2.10.12 -> 2.10.18 age adoption passing confidence
@sanity/util (source) 3.68.1 -> 3.68.3 age adoption passing confidence
@sanity/vision (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
@sveltejs/kit (source) ^2.13.0 -> ^2.15.1 age adoption passing confidence
@tinloof/sanity-studio (source) 1.5.0 -> 1.6.1 age adoption passing confidence
@types/react (source) ^18.3.11 -> ^18.3.18 age adoption passing confidence
@types/react-dom (source) ^18.3.1 -> ^18.3.5 age adoption passing confidence
@vercel/remix (source) ^2.12.0 -> ^2.15.2 age adoption passing confidence
@vercel/speed-insights (source) ^1.0.12 -> ^1.1.0 age adoption passing confidence
@xstate/react (source) ^5.0.0 -> ^5.0.1 age adoption passing confidence
astro (source) ^5.1.0 -> ^5.1.2 age adoption passing confidence
babel-plugin-react-compiler (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-63e3235-20250105 age adoption passing confidence
eslint-config-next (source) 15.0.0-canary.202 -> 15.1.1-canary.25 age adoption passing confidence
eslint-plugin-react ^7.37.2 -> ^7.37.3 age adoption passing confidence
eslint-plugin-react-compiler (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-63e3235-20250105 age adoption passing confidence
framer-motion 12.0.0-alpha.1 -> 12.0.0-alpha.2 age adoption passing confidence
isbot (source) ^5.1.18 -> ^5.1.20 age adoption passing confidence
isbot (source) ^5.1.17 -> ^5.1.20 age adoption passing confidence
next (source) 15.0.0-canary.202 -> 15.1.1-canary.25 age adoption passing confidence
next-sanity (source) 9.8.28 -> 9.8.31 age adoption passing confidence
next-sanity (source) ^9.8.28 -> ^9.8.31 age adoption passing confidence
next-sanity (source) 9.7.0-canary.23 -> 9.8.31 age adoption passing confidence
nuxt (source) ^3.14.1592 -> ^3.15.1 age adoption passing confidence
postcss (source) ^8.4.47 -> ^8.4.49 age adoption passing confidence
react (source) 19.0.0-rc-fb9a90fa48-20240614 -> 19.0.0 age adoption passing confidence
react-compiler-runtime (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-63e3235-20250105 age adoption passing confidence
react-dom (source) 19.0.0-rc-fb9a90fa48-20240614 -> 19.0.0 age adoption passing confidence
sanity (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
sanity (source) 3.68.1 -> 3.68.3 age adoption passing confidence
styled-components (source) 6.1.13 -> 6.1.14 age adoption passing confidence
tailwindcss (source) ^3.4.14 -> ^3.4.17 age adoption passing confidence
three (source) ^0.171.0 -> ^0.172.0 age adoption passing confidence
typescript (source) 5.6.3 -> 5.7.2 age adoption passing confidence
vite (source) ^5.4.9 -> ^5.4.11 age adoption passing confidence
vite-tsconfig-paths ^5.0.1 -> ^5.1.4 age adoption passing confidence

Release Notes

withastro/astro (@​astrojs/react)

v4.1.2

Compare Source

Patch Changes
withastro/astro (@​astrojs/tailwind)

v5.1.4

Compare Source

Patch Changes
fontsource/font-files (@​fontsource/fira-mono)

v5.1.1

Compare Source

vercel/next.js (@​next/bundle-analyzer)

v15.1.1-canary.25

Compare Source

Core Changes
  • [DevOverlay] Remove Dialog Banner: #​74464
  • [DevOverlay] Add color palette script: #​74465
  • Fix: Preserve intentional percent encoding in search param for client nav: #​74473
  • [DevOverlay] Implement New Overlay Layout with Bottom Stacks: #​74466
  • [DevOverlay] Add error overlay footer and feedback: #​74472
  • [DevOverlay] Remove temporary header children: #​74490
  • fix: server functions x-forwarded-host possible multiple values: #​73701
  • [DevOverlay] Pass footer message from error containers: #​74493
  • feat(rsc): allow host or forwarded: #​74199
  • [DevOverlay] Adjust border style for header and footer: #​74480
  • feat(next/image): add support for images.qualities in next.config: #​74257
Example Changes
  • Fix linting between lint-check and lint-staged: #​74503
Misc Changes
  • refactor(next-core): Remove local annotations from structs in next-core/src/app_structure.rs: #​74200
Credits

Huge thanks to @​bgw, @​devjiwonchoi, @​gaojude, @​Netail, @​tknickman, @​styfle, and @​ijjk for helping!

v15.1.1-canary.24

Compare Source

Core Changes
  • fix: update broken links in config-shared.d.ts: #​74122
  • fix: fix typos in errors.json & create-component-tree.tsx: #​74471
  • Safely retrieve router, improve page reload logic: #​74209
  • docs: bump year: #​74475
Misc Changes
  • docs(generate-static-params): add typescript example and missing jsx switcher: #​73962
  • docs(fetching-data-and-streaming): add missing types to example: #​74081
  • docs(use-cache): add missing switcher code blocks and types in examples: #​74083
Credits

Huge thanks to @​yongholeeme, @​spidersouris, @​devpla, @​gurkerl83, and @​cassiossantos for helping!

v15.1.1-canary.23

Compare Source

Misc Changes
  • docs: remove catch-all for opengraph-image: #​74338
Credits

Huge thanks to @​leerob for helping!

v15.1.1-canary.22

Compare Source

Misc Changes
  • Fix typo in generateViewport docs: #​74288
Credits

Huge thanks to @​n1ckoates for helping!

v15.1.1-canary.21

Compare Source

Misc Changes
  • chore(github): update comments stale period: #​74291
Credits

Huge thanks to @​samcx for helping!

v15.1.1-canary.20

Compare Source

Core Changes
  • [DevOverlay] fix: restore pagination style: #​74296
Credits

Huge thanks to @​devjiwonchoi for helping!

v15.1.1-canary.19

Compare Source

Core Changes
  • refactor: error boundary rendering in app-render: #​74259
  • [metadata] Merge the metadata resolve apis into one api: #​74191
Credits

Huge thanks to @​huozhi for helping!

v15.1.1-canary.18

Compare Source

Misc Changes
  • ci: use consistent playwright-chromium version: #​74251
  • Fixed typo in documentation: #​74254
  • docs: fix typo in self-host after() details: #​74243
Credits

Huge thanks to @​ztanner, @​ytreister, and @​sommeeeer for helping!

v15.1.1-canary.17

Compare Source

Misc Changes
  • docs: update ISR self-hosting example code: #​74211
Credits

Huge thanks to @​leerob for helping!

v15.1.1-canary.16

Compare Source

Core Changes
  • Use Geist font in Dev Overlay: #​74160
  • [metadata] Align prefetch head type with head: #​74161
Credits

Huge thanks to @​devjiwonchoi and @​huozhi for helping!

v15.1.1-canary.15

Compare Source

Core Changes
  • used shared worker for lint & typecheck steps: #​74154
  • chore(turbopack): Ignore no-vc-struct lint in trybuild proc macro tests: #​74110
  • Use provided waitUntil for pending revalidates: #​74164
  • Port ErrorPagination: #​74097
  • Port LeftIcon RightIcon from ErrorPagination: #​74098
  • Port ToolButtonsGroup: #​74099
  • [Turbopack] fix import.meta.url in monorepo: #​72612
  • refactor: rename the react client

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate renovate bot requested a review from a team as a code owner December 23, 2024 02:35
Copy link

vercel bot commented Dec 23, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
live-visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-astro ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-next-with-i18n ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-nuxt ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-page-builder-demo ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-remix ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-storybook ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-studio ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am
visual-editing-svelte ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 6, 2025 10:54am

Copy link

socket-security bot commented Dec 23, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@astrojs/[email protected] Transitive: environment, filesystem, shell, unsafe +54 16.7 MB fredkschott
npm/@astrojs/[email protected] Transitive: environment, filesystem, unsafe +3 731 kB fredkschott
npm/@fontsource/[email protected] None 0 427 kB lotusdevshack
npm/@next/[email protected] Transitive: environment, filesystem, network, shell +18 2.31 MB vercel-release-bot
npm/@next/[email protected] Transitive: environment, filesystem, network, shell +18 2.31 MB matt.straka, rauchg, timer, ...2 more
npm/@nuxt/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +235 72.5 MB antfu
npm/@nuxtjs/[email protected] Transitive: environment, filesystem, network, shell, unsafe +140 43.3 MB danielroe
npm/@react-three/[email protected] network Transitive: environment, filesystem, shell, unsafe +57 83.6 MB gsimone
npm/@remix-run/[email protected] None 0 15.6 kB mjackson
npm/@remix-run/[email protected] environment, filesystem Transitive: eval, network, shell, unsafe +473 53.3 MB mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, shell, unsafe +250 35.2 MB chancestrickland, mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, network +49 16.2 MB mjackson
npm/@remix-run/[email protected] environment, network Transitive: filesystem +9 5.49 MB mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, network, unsafe +94 2.93 MB mjackson
npm/@sanity/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +414 102 MB armandocerna, ash, atombender, ...62 more
npm/@sveltejs/[email protected] Transitive: environment, filesystem +37 5.34 MB conduitry, dominik_g, rich_harris, ...1 more
npm/@tinloof/[email protected] environment Transitive: eval +14 4.47 MB tinloof-user
npm/@vercel/[email protected] Transitive: environment, eval, filesystem, network, unsafe +44 19.1 MB vercel-release-bot
npm/@xstate/[email protected] Transitive: environment +1 63.9 kB xstate-release-bot
npm/[email protected] Transitive: environment, eval, filesystem, network, shell +275 45.3 MB fredkschott, matthewp, natemoo-re
npm/[email protected] Transitive: environment +3 18.3 MB fb, mofeiz, react-bot, ...1 more
npm/[email protected] unsafe Transitive: environment, eval, filesystem +146 9.79 MB vercel-release-bot
npm/[email protected] Transitive: environment, filesystem, unsafe +41 4.81 MB timer, timneutkens, vercel-release-bot
npm/[email protected] Transitive: environment, filesystem, shell, unsafe +51 21.7 MB react-bot
npm/[email protected] Transitive: environment, eval, filesystem +116 6.45 MB ljharb, yannickcr
npm/[email protected] environment 0 3.01 MB popmotion
npm/[email protected] None 0 30.4 kB omrilotan
npm/[email protected] environment Transitive: eval, filesystem, network, shell, unsafe +2451 581 MB sanity-io
npm/[email protected] Transitive: environment, filesystem +11 127 MB vercel-release-bot
npm/[email protected] Transitive: environment, filesystem +38 133 MB rauchg, timneutkens, vercel-release-bot
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +534 118 MB danielroe
npm/[email protected] None 0 42.9 kB react-bot
npm/[email protected] environment Transitive: filesystem +32 5.79 MB probablyup
npm/[email protected] network 0 27 MB mrdoob

🚮 Removed packages: npm/@astrojs/[email protected], npm/@astrojs/[email protected], npm/@fontsource/[email protected], npm/@next/[email protected], npm/@next/[email protected], npm/@nuxt/[email protected], npm/@nuxtjs/[email protected], npm/@react-three/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@sveltejs/[email protected], npm/@tinloof/[email protected], npm/@vercel/[email protected], npm/@xstate/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

socket-security bot commented Dec 23, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/dist/compiled/glob/LICENSE, package/dist/compiled/glob/LICENSE)
⚠︎
License Policy Violation npm/@fontsource/[email protected]
  • License: OFL-1.1 - Not allowed by license policy (npm metadata, package/package.json, package/LICENSE)
⚠︎
License Policy Violation npm/[email protected]
  • License: Bitstream-Vera - Not allowed by license policy (package/examples/fonts/LICENSE)
⚠︎
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/dist/compiled/glob/LICENSE, package/dist/compiled/glob/LICENSE)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from 0dc9bee to 0871a2d Compare December 23, 2024 11:57
@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from 0871a2d to dcd64eb Compare December 24, 2024 00:35
@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from e6b1d9e to 445215a Compare January 5, 2025 13:04
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant