Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the npm_and_yarn group across 6 directories with 8 updates #14

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 11, 2024

Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: next.
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: octokit.
Bumps the npm_and_yarn group with 4 updates in the /test directory: express, sharp, svelte and undici.
Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: sharp.
Bumps the npm_and_yarn group with 3 updates in the /test/cli/install/migration/contoso-test directory: next, express and webpack-dev-middleware.

Updates next from 12.3.4 to 14.1.4

Release notes

Sourced from next's releases.

v14.1.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Test Changes

v14.1.3

Core Changes

Credits

Huge thanks to @​ijjk

v14.1.2

Note: this is a backport release for critical bug fixes -- this does not include all pending features/changes on canary

Core Changes

  • Fix sitemap generateSitemaps support for string id (#61088)
  • Fix: generateSitemaps in production giving 404 (#62212)
  • Fix redirect under suspense boundary with basePath (#62597)
  • Fix: Add stricter check for "use server" exports (#62821)
  • ensure server action errors notify rejection handlers (#61588)
  • make router restore action resilient to a missing tree (#62098)
  • build: remove sentry from the externals list #61194
  • Reduce memory/cache overhead from over loader processing #62005

Credits

Huge thanks to @​huozhi, @​shuding, @​Ethan-Arrowood, @​styfle, @​ijjk, @​ztanner, @​balazsorban44, @​kdy1, and @​williamli for helping!

... (truncated)

Commits
  • f1fc357 v14.1.4
  • e6a117b (backport) Update React from 60a927d04 to 4b84f1161 (#63476)
  • c227315 update assertion due to stack trace change
  • 3aae252 test: switch order of tests to avoid flakniess (#63482)
  • 4804982 fix broken create-next-app tests (#63019)
  • 81114f3 fix revalidation issue with route handlers (#63213)
  • 944a84c ensure mpa navigations to the same URL work after restoring from bfcache (#63...
  • 21e11f1 Ensure PromiseLikeOfReactNode is not included in .d.ts files (#63185)
  • 531cdb5 Fix metadata url cases should not append with trailing slash (#63050)
  • a3707f5 feat: add deploymentId config (#63198)
  • Additional commits viewable in compare view

Updates next from 11.1.4 to 14.1.4

Release notes

Sourced from next's releases.

v14.1.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Test Changes

v14.1.3

Core Changes

Credits

Huge thanks to @​ijjk

v14.1.2

Note: this is a backport release for critical bug fixes -- this does not include all pending features/changes on canary

Core Changes

  • Fix sitemap generateSitemaps support for string id (#61088)
  • Fix: generateSitemaps in production giving 404 (#62212)
  • Fix redirect under suspense boundary with basePath (#62597)
  • Fix: Add stricter check for "use server" exports (#62821)
  • ensure server action errors notify rejection handlers (#61588)
  • make router restore action resilient to a missing tree (#62098)
  • build: remove sentry from the externals list #61194
  • Reduce memory/cache overhead from over loader processing #62005

Credits

Huge thanks to @​huozhi, @​shuding, @​Ethan-Arrowood, @​styfle, @​ijjk, @​ztanner, @​balazsorban44, @​kdy1, and @​williamli for helping!

... (truncated)

Commits
  • f1fc357 v14.1.4
  • e6a117b (backport) Update React from 60a927d04 to 4b84f1161 (#63476)
  • c227315 update assertion due to stack trace change
  • 3aae252 test: switch order of tests to avoid flakniess (#63482)
  • 4804982 fix broken create-next-app tests (#63019)
  • 81114f3 fix revalidation issue with route handlers (#63213)
  • 944a84c ensure mpa navigations to the same URL work after restoring from bfcache (#63...
  • 21e11f1 Ensure PromiseLikeOfReactNode is not included in .d.ts files (#63185)
  • 531cdb5 Fix metadata url cases should not append with trailing slash (#63050)
  • a3707f5 feat: add deploymentId config (#63198)
  • Additional commits viewable in compare view

Updates octokit from 2.1.0 to 3.2.0

Release notes

Sourced from octokit's releases.

v3.2.0

3.2.0 (2024-04-03)

Features

v3.1.2

3.1.2 (2023-11-15)

Bug Fixes

  • updates app.js for the handling of an error being thrown by the verify method in webhooks.js (#2576) (b59da80)

v3.1.1

3.1.1 (2023-09-25)

Bug Fixes

v3.1.0

3.1.0 (2023-07-26)

Features

v3.0.0

3.0.0 (2023-07-11)

Features

BREAKING CHANGES

  • Drop support for NodeJS v14, v16
  • Remove previews support for the REST API
  • remove agent option from octokit.request()
  • Replace support for Node.js http(s) Agents with documentation on using fetch dispatchers instead (via @octokit/request)
  • Remove ability to pass custom request options, except for method, headers, body, signal (via @​octokit/request)

v3.0.0-beta.5

... (truncated)

Commits

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: [email protected]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates sharp from 0.33.2 to 0.33.3

Changelog

Sourced from sharp's changelog.

v0.33.3 - 23rd March 2024

  • Upgrade to libvips v8.15.2 for upstream bug fixes.

  • Ensure keepIccProfile retains P3 and CMYK input profiles. #3906 #4008

  • Ensure text.wrap property can accept word-char as value. #4028 @​yolopunk

  • Ensure clone takes a deep copy of existing options. #4029

  • Add bitdepth option to heif output (prebuilt binaries support 8-bit only). #4036 @​mertalev

Commits

Updates svelte from 4.2.12 to 4.2.13

Release notes

Sourced from svelte's releases.

[email protected]

Patch Changes

  • fix: applying :global for +,~ sibling combinator when slots are present (#9282)
Changelog

Sourced from svelte's changelog.

4.2.13

Patch Changes

  • fix: applying :global for +,~ sibling combinator when slots are present (#9282)
Commits
  • 11b8e94 Version Packages (#11101)
  • 9de149c fix: applying :global for +,~ sibling combinator when slots are present. fixe...
  • a6bf91c docs: add file annotations to examples that benefit from ts toggle (#11058)
  • See full diff in compare view

Updates undici from 5.28.3 to 5.28.4

Release notes

Sourced from undici's releases.

v5.28.4

⚠️ Security Release ⚠️

Full Changelog: nodejs/undici@v5.28.3...v5.28.4

Commits

Updates sharp from 0.33.2 to 0.33.3

Changelog

Sourced from sharp's changelog.

v0.33.3 - 23rd March 2024

  • Upgrade to libvips v8.15.2 for upstream bug fixes.

  • Ensure keepIccProfile retains P3 and CMYK input profiles. #3906 #4008

  • Ensure text.wrap property can accept word-char as value. #4028 @​yolopunk

  • Ensure clone takes a deep copy of existing options. #4029

  • Add bitdepth option to heif output (prebuilt binaries support 8-bit only). #4036 @​mertalev

Commits

Updates next from 13.5.3 to 14.1.4

Release notes

Sourced from next's releases.

v14.1.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Test Changes

v14.1.3

Core Changes

Credits

Huge thanks to @​ijjk

v14.1.2

Note: this is a backport release for critical bug fixes -- this does not include all pending features/changes on canary

Core Changes

  • Fix sitemap generateSitemaps support for string id (#61088)
  • Fix: generateSitemaps in production giving 404 (#62212)
  • Fix redirect under suspense boundary with basePath (#62597)
  • Fix: Add stricter check for "use server" exports (#62821)
  • ensure server action errors notify rejection handlers (#61588)
  • make router restore action resilient to a missing tree (#62098)
  • build: remove sentry from the externals list #61194
  • Reduce memory/cache overhead from over loader processing #62005

Credits

Huge thanks to @​huozhi, @​shuding, @​Ethan-Arrowood, @​styfle, @​ijjk, @​ztanner, @​balazsorban44, @​kdy1, and @​williamli for helping!

... (truncated)

Commits
  • f1fc357 v14.1.4
  • e6a117b (backport) Update React from 60a927d04 to 4b84f1161 (#63476)
  • c227315 update assertion due to stack trace change
  • 3aae252 test: switch order of tests to avoid flakniess (#63482)
  • 4804982 fix broken create-next-app tests (#63019)
  • 81114f3 fix revalidation issue with route handlers (#63213)
  • 944a84c ensure mpa navigations to the same URL work after restoring from bfcache (#63...
  • 21e11f1 Ensure PromiseLikeOfReactNode is not included in .d.ts files (#63185)
  • 531cdb5 Fix metadata url cases should not append with trailing slash (#63050)
  • a3707f5 feat: add deploymentId config (#63198)
  • Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

New Contributors

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Other Changes

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

  • Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

  • Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

Commits
  • 04bc627 4.19.2
  • da4d763 Improved fix for open redirect allow list bypass
  • 4f0f6cc 4.19.1
  • a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
  • a1fa90f fixed un-edited version in history.md for 4.19.0
  • 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
  • 084e365 4.19.0
  • 0867302 Prevent open redirect allow list bypass due to encodeurl
  • 567c9c6 Add note on how to update docs for new release (#5541)
  • 69a4cf2 deps: [email protected]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.


Updates postcss from 8.4.14 to 8.4.27

Release notes

Sourced from postcss's releases.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

8.4.21

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

  • Fixed whitespace preserving after AST transformations (by @​romainmenke).

8.4.18

  • Fixed an error on absolute: true with empty sourceContent (by @​KingSora).

8.4.17

8.4.16

  • Fixed Root AST migration.

8.4.15

  • Fixed AST normalization after using custom parser with old PostCSS AST.
Changelog

Sourced from postcss's changelog.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

  • Fixed TypeScript support with node16 (by Remco Haszing).

8.4.21

  • Fixed Input#error types (by Aleks Hudochenkov).

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

  • Fixed whitespace preserving after AST transformations (by Romain Menke).

8.4.18

  • Fixed an error on absolute: true with empty sourceContent (by Rene Haas).

8.4.17

  • Fixed Node.before() unexpected behavior (by Romain Menke).
  • Added TOC to docs (by Mikhail Dedov).

8.4.16

  • Fixed Root AST migration.

8.4.15

  • Fixed AST normalization after using custom parser with old PostCSS AST.
Commits

Updates webpack-dev-middleware from 5.3.3 to 5.3.4

Release notes

Sourced from webpack-dev-middleware's releases.

v5.3.4

5.3.4 (2024-03-20)

Bug Fixes

  • security: do not allow to read files above (#1779) (189c4ac)
Changelog

Sourced from webpack-dev-middleware's changelog.

5.3.4 (2024-03-20)

Bug Fixes

  • security: do not allow to read files above (#1779) (189c4ac)
Commits
  • 86071ea chore(release): 5.3.4
  • 189c4ac fix(security): do not allow to read files above (#1779)
  • See full diff in

…updates

Bumps the npm_and_yarn group with 1 update in the /bench/hot-module-reloading/css-stress-test directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /examples/react-fast-refresh-test directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /packages/bun-release directory: [octokit](https://github.com/octokit/octokit.js).
Bumps the npm_and_yarn group with 4 updates in the /test directory: [express](https://github.com/expressjs/express), [sharp](https://github.com/lovell/sharp), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [undici](https://github.com/nodejs/undici).
Bumps the npm_and_yarn group with 1 update in the /test/cli/install/migration/complex-workspace directory: [sharp](https://github.com/lovell/sharp).
Bumps the npm_and_yarn group with 3 updates in the /test/cli/install/migration/contoso-test directory: [next](https://github.com/vercel/next.js), [express](https://github.com/expressjs/express) and [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware).


Updates `next` from 12.3.4 to 14.1.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v12.3.4...v14.1.4)

Updates `next` from 11.1.4 to 14.1.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v12.3.4...v14.1.4)

Updates `octokit` from 2.1.0 to 3.2.0
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v2.1.0...v3.2.0)

Updates `express` from 4.18.2 to 4.19.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.19.2)

Updates `sharp` from 0.33.2 to 0.33.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md)
- [Commits](lovell/sharp@v0.33.2...v0.33.3)

Updates `svelte` from 4.2.12 to 4.2.13
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/[email protected]/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte)

Updates `undici` from 5.28.3 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.28.3...v5.28.4)

Updates `sharp` from 0.33.2 to 0.33.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md)
- [Commits](lovell/sharp@v0.33.2...v0.33.3)

Updates `next` from 13.5.3 to 14.1.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v12.3.4...v14.1.4)

Updates `express` from 4.18.2 to 4.19.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.18.2...4.19.2)

Updates `postcss` from 8.4.14 to 8.4.27
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.14...8.4.27)

Updates `webpack-dev-middleware` from 5.3.3 to 5.3.4
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: octokit
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sharp
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: svelte
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: sharp
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 11, 2024
Copy link
Author

dependabot bot commented on behalf of github Apr 23, 2024

Superseded by #15.

@dependabot dependabot bot closed this Apr 23, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/bench/hot-module-reloading/css-stress-test/npm_and_yarn-ac332e9a57 branch April 23, 2024 03:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants