Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update app dependencies (canary) #2354

Open
wants to merge 1 commit into
base: canary
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 23, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@astrojs/react (source) ^4.1.1 -> ^4.1.2 age adoption passing confidence
@astrojs/tailwind (source) ^5.1.3 -> ^5.1.4 age adoption passing confidence
@fontsource/fira-mono (source) ^5.1.0 -> ^5.1.1 age adoption passing confidence
@next/bundle-analyzer (source) 15.0.0-canary.202 -> 15.1.1-canary.23 age adoption passing confidence
@nuxt/devtools (source) ^1.6.4 -> ^1.7.0 age adoption passing confidence
@nuxtjs/sanity ^1.13.2 -> ^1.13.3 age adoption passing confidence
@portabletext/react ^3.1.0 -> ^3.2.0 age adoption passing confidence
@react-three/drei ^9.120.4 -> ^9.120.5 age adoption passing confidence
@remix-run/css-bundle (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/dev (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/dev (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/eslint-config (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/node (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/node (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/react (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/react (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@remix-run/serve (source) ^2.15.1 -> ^2.15.2 age adoption passing confidence
@remix-run/serve (source) ^2.13.1 -> ^2.15.2 age adoption passing confidence
@sanity/cli (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
@sanity/image-url (source) ^1.0.2 -> ^1.1.0 age adoption passing confidence
@sanity/ui (source) 2.10.12 -> 2.10.14 age adoption passing confidence
@sanity/util (source) 3.68.1 -> 3.68.3 age adoption passing confidence
@sanity/vision (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
@sveltejs/kit (source) ^2.13.0 -> ^2.15.1 age adoption passing confidence
@types/react (source) ^18.3.11 -> ^18.3.18 age adoption passing confidence
@types/react-dom (source) ^18.3.1 -> ^18.3.5 age adoption passing confidence
@vercel/remix (source) ^2.12.0 -> ^2.15.2 age adoption passing confidence
@vercel/speed-insights (source) ^1.0.12 -> ^1.1.0 age adoption passing confidence
@xstate/react (source) ^5.0.0 -> ^5.0.1 age adoption passing confidence
astro (source) ^5.1.0 -> ^5.1.1 age adoption passing confidence
babel-plugin-react-compiler (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-55955c9-20241229 age adoption passing confidence
eslint-config-next (source) 15.0.0-canary.202 -> 15.1.1-canary.23 age adoption passing confidence
eslint-plugin-react ^7.37.2 -> ^7.37.3 age adoption passing confidence
eslint-plugin-react-compiler (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-55955c9-20241229 age adoption passing confidence
framer-motion 12.0.0-alpha.1 -> 12.0.0-alpha.2 age adoption passing confidence
isbot (source) ^5.1.18 -> ^5.1.19 age adoption passing confidence
isbot (source) ^5.1.17 -> ^5.1.19 age adoption passing confidence
next (source) 15.0.0-canary.202 -> 15.1.1-canary.23 age adoption passing confidence
next-sanity (source) 9.8.28 -> 9.8.30 age adoption passing confidence
next-sanity (source) ^9.8.28 -> ^9.8.30 age adoption passing confidence
next-sanity (source) 9.7.0-canary.23 -> 9.8.30 age adoption passing confidence
nuxt (source) ^3.14.1592 -> ^3.15.0 age adoption passing confidence
postcss (source) ^8.4.47 -> ^8.4.49 age adoption passing confidence
react (source) 19.0.0-rc-fb9a90fa48-20240614 -> 19.0.0 age adoption passing confidence
react-compiler-runtime (source) 19.0.0-beta-201e55d-20241215 -> 19.0.0-beta-55955c9-20241229 age adoption passing confidence
react-dom (source) 19.0.0-rc-fb9a90fa48-20240614 -> 19.0.0 age adoption passing confidence
sanity (source) ^3.68.1 -> ^3.68.3 age adoption passing confidence
sanity (source) 3.68.1 -> 3.68.3 age adoption passing confidence
tailwindcss (source) ^3.4.14 -> ^3.4.17 age adoption passing confidence
three (source) ^0.171.0 -> ^0.172.0 age adoption passing confidence
typescript (source) 5.6.3 -> 5.7.2 age adoption passing confidence
vite (source) ^5.4.9 -> ^5.4.11 age adoption passing confidence
vite-tsconfig-paths ^5.0.1 -> ^5.1.4 age adoption passing confidence

Release Notes

withastro/astro (@​astrojs/react)

v4.1.2

Compare Source

Patch Changes
withastro/astro (@​astrojs/tailwind)

v5.1.4

Compare Source

Patch Changes
fontsource/font-files (@​fontsource/fira-mono)

v5.1.1

Compare Source

vercel/next.js (@​next/bundle-analyzer)

v15.1.1-canary.23

Compare Source

Misc Changes
  • docs: remove catch-all for opengraph-image: #​74338
Credits

Huge thanks to @​leerob for helping!

v15.1.1-canary.22

Compare Source

Misc Changes
  • Fix typo in generateViewport docs: #​74288
Credits

Huge thanks to @​n1ckoates for helping!

v15.1.1-canary.21

Compare Source

Misc Changes
  • chore(github): update comments stale period: #​74291
Credits

Huge thanks to @​samcx for helping!

v15.1.1-canary.20

Compare Source

Core Changes
  • [DevOverlay] fix: restore pagination style: #​74296
Credits

Huge thanks to @​devjiwonchoi for helping!

v15.1.1-canary.19

Compare Source

Core Changes
  • refactor: error boundary rendering in app-render: #​74259
  • [metadata] Merge the metadata resolve apis into one api: #​74191
Credits

Huge thanks to @​huozhi for helping!

v15.1.1-canary.18

Compare Source

Misc Changes
  • ci: use consistent playwright-chromium version: #​74251
  • Fixed typo in documentation: #​74254
  • docs: fix typo in self-host after() details: #​74243
Credits

Huge thanks to @​ztanner, @​ytreister, and @​sommeeeer for helping!

v15.1.1-canary.17

Compare Source

Misc Changes
  • docs: update ISR self-hosting example code: #​74211
Credits

Huge thanks to @​leerob for helping!

v15.1.1-canary.16

Compare Source

Core Changes
  • Use Geist font in Dev Overlay: #​74160
  • [metadata] Align prefetch head type with head: #​74161
Credits

Huge thanks to @​devjiwonchoi and @​huozhi for helping!

v15.1.1-canary.15

Compare Source

Core Changes
  • used shared worker for lint & typecheck steps: #​74154
  • chore(turbopack): Ignore no-vc-struct lint in trybuild proc macro tests: #​74110
  • Use provided waitUntil for pending revalidates: #​74164
  • Port ErrorPagination: #​74097
  • Port LeftIcon RightIcon from ErrorPagination: #​74098
  • Port ToolButtonsGroup: #​74099
  • [Turbopack] fix import.meta.url in monorepo: #​72612
  • refactor: rename the react client error callbacks module: #​74192
  • Use ErrorOverlayLayout in Errors component: #​74107
  • refactor: remove internal queries, move to request metadata: #​74100
  • Fix accessing headers in progressively enhanced form actions: #​74196
Misc Changes
  • refactor(turbo-tasks): Remove public OperationVc constructor, introduce a macro annotation for creating OperationVc types: #​72871
  • refactor(turbo-tasks): Make State require OperationValue: #​73876
  • chore(turbopack): Remove or improve a few uses of .to_resolved().await inside a loop: #​74112
  • refactor(turbopack): Rewrite CollectiblesSource callsites to use OperationVc (part 1/3): #​74051
  • chore(turbopack): Delete to-resolved-in-loop lint (too low signal): #​74113
  • Allow usage of this and arguments in nested function expression: #​74179
Credits

Huge thanks to @​ztanner, @​bgw, @​ijjk, @​unstubbable, @​devjiwonchoi, @​sokra, @​huozhi, and @​wyattjoh for helping!

v15.1.1-canary.14

Compare Source

Core Changes
  • fix(typed-routes): Fix route type fallback: #​73271
  • Rename root-layout-missing-tags-error.tsx to pascal case: #​74089
  • Turbopack: next/dynamic use transitions instead of AST analysis: #​73627
  • [Turbopack] fix root and project path usages in a monorepo: #​73552
  • support bun.lock as package manager lockfile: #​74056
  • Stop sourcemapping function names: #​74085
  • Move ErrorIndicator to separate file: #​74090
  • Upgrade React from 372ec00c-20241209 to 518d06d2-20241219: #​74155
Misc Changes
  • Turbopack: change COMMON_CHUNKING_TYPE: #​74080
  • Turbopack: only inherit visited modules from parent layouts: #​74072
  • fix: improve types in turbopack runtime: #​74119
  • Fix merge conflicts: #​74157
  • refactor(turbopack/next-core): Migrate app_page_loader_tree structs to ResolvedVc: #​74114
Credits

Huge thanks to @​alitas, @​mischnic, @​devjiwonchoi, @​sokra, @​RiskyMH, @​lubieowoce, @​eps1lon, and @​bgw for helping!

v15.1.1-canary.13

Compare Source

Core Changes
  • Add storybook for UI testing: #​74032
  • [Segment Cache] Support for non-PPR projects/pages: #​73960
  • exclude .stories. and .test. files from taskfile watch and error plugin: #​74064
  • Upgrade React from 7283a213-20241206 to 372ec00c-20241209: #​73749
  • fix: aria attribute typo for error overlay: #​74074
  • fix: set x-deployment-id to every middleware prefetch request: #​71193
  • Add middleware handler for error code telemetry: #​74088
  • Create ErrorOverlay component: #​74073
Example Changes
  • examples: update with-mdx-remote example to utilize the App Router: [#​74067](htt

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate renovate bot requested a review from a team as a code owner December 23, 2024 02:35
Copy link

vercel bot commented Dec 23, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
live-visual-editing-next ❌ Failed (Inspect) Dec 31, 2024 0:55am
visual-editing-astro ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-next-with-i18n ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-nuxt ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-page-builder-demo ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-remix ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-storybook ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-studio ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am
visual-editing-svelte ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 31, 2024 0:55am

Copy link

socket-security bot commented Dec 23, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@astrojs/[email protected] Transitive: environment, filesystem, shell, unsafe +54 16.7 MB fredkschott
npm/@astrojs/[email protected] Transitive: environment, filesystem, unsafe +3 731 kB fredkschott
npm/@fontsource/[email protected] None 0 427 kB lotusdevshack
npm/@next/[email protected] Transitive: environment, filesystem, network, shell +18 2.31 MB matt.straka, rauchg, timer, ...2 more
npm/@next/[email protected] Transitive: environment, filesystem, network, shell +18 2.31 MB matt.straka, rauchg, timer, ...2 more
npm/@nuxt/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +236 72.4 MB antfu
npm/@nuxtjs/[email protected] Transitive: environment, filesystem, network, shell, unsafe +142 43.3 MB danielroe
npm/@react-three/[email protected] network Transitive: environment, filesystem, shell, unsafe +57 83.6 MB gsimone
npm/@remix-run/[email protected] None 0 15.6 kB mjackson
npm/@remix-run/[email protected] environment, filesystem Transitive: eval, network, shell, unsafe +472 53.3 MB mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, shell, unsafe +248 35.2 MB chancestrickland, mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, network +48 16.2 MB mjackson
npm/@remix-run/[email protected] environment, network Transitive: filesystem +9 5.49 MB mjackson
npm/@remix-run/[email protected] Transitive: environment, eval, filesystem, network, unsafe +93 2.92 MB mjackson
npm/@sanity/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +414 102 MB armandocerna, ash, atombender, ...62 more
npm/@sanity/[email protected] Transitive: environment +57 18.2 MB armandocerna, ash, atombender, ...62 more
npm/@sveltejs/[email protected] Transitive: environment, filesystem +37 5.34 MB conduitry, dominik_g, rich_harris, ...1 more
npm/@vercel/[email protected] Transitive: environment, eval, filesystem, network, unsafe +44 19.1 MB vercel-release-bot
npm/@xstate/[email protected] Transitive: environment +1 63.9 kB xstate-release-bot
npm/[email protected] Transitive: environment, eval, filesystem, network, shell +311 49.8 MB fredkschott, matthewp, natemoo-re
npm/[email protected] Transitive: environment +3 7.69 MB react-bot
npm/[email protected] unsafe Transitive: environment, eval, filesystem +144 9.77 MB vercel-release-bot
npm/[email protected] Transitive: environment, filesystem, unsafe +41 4.81 MB timer, timneutkens, vercel-release-bot
npm/[email protected] Transitive: environment, filesystem, shell, unsafe +51 15 MB react-bot
npm/[email protected] Transitive: environment, eval, filesystem +114 6.43 MB ljharb, yannickcr
npm/[email protected] environment 0 3.01 MB popmotion
npm/[email protected] None 0 30.4 kB omrilotan
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +2451 581 MB armandocerna, ash, atombender, ...62 more
npm/[email protected] Transitive: environment, filesystem +11 127 MB rauchg, timneutkens, vercel-release-bot
npm/[email protected] Transitive: environment, filesystem +38 133 MB rauchg, timneutkens, vercel-release-bot
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +533 118 MB antfu, atinux, danielroe, ...1 more
npm/[email protected] None 0 72.2 kB react-bot
npm/[email protected] network 0 27 MB mrdoob

🚮 Removed packages: npm/@astrojs/[email protected], npm/@astrojs/[email protected], npm/@fontsource/[email protected], npm/@next/[email protected], npm/@next/[email protected], npm/@nuxt/[email protected], npm/@nuxtjs/[email protected], npm/@react-three/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@remix-run/[email protected], npm/@sveltejs/[email protected], npm/@vercel/[email protected], npm/@xstate/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

socket-security bot commented Dec 23, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/dist/compiled/glob/LICENSE, package/dist/compiled/glob/LICENSE)
⚠︎
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/dist/compiled/glob/LICENSE, package/dist/compiled/glob/LICENSE)
⚠︎
License Policy Violation npm/@fontsource/[email protected]
  • License: OFL-1.1 - Not allowed by license policy (npm metadata, package/package.json, package/LICENSE)
⚠︎
License Policy Violation npm/[email protected]
  • License: Bitstream-Vera - Not allowed by license policy (package/examples/fonts/LICENSE)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from 0dc9bee to 0871a2d Compare December 23, 2024 11:57
@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from 0871a2d to dcd64eb Compare December 24, 2024 00:35
@renovate renovate bot force-pushed the renovate/canary-app-dependencies branch from f75998c to 79399c6 Compare December 31, 2024 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants