Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #389

Merged
merged 1 commit into from
Apr 15, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 11, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@crowdin/crowdin-api-client 1.33.0 -> 1.33.1 age adoption passing confidence dependencies patch
@neondatabase/serverless (source) 0.9.0 -> 0.9.1 age adoption passing confidence dependencies patch
@storybook/addon-a11y (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/addon-essentials (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/addon-interactions (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/addon-links (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/addon-viewport (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/blocks (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/nextjs (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/react (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
@storybook/test (source) 8.0.6 -> 8.0.8 age adoption passing confidence dependencies patch
@types/node (source) 20.12.5 -> 20.12.7 age adoption passing confidence devDependencies patch
@types/react (source) 18.2.74 -> 18.2.78 age adoption passing confidence devDependencies patch
@types/react-dom (source) 18.2.24 -> 18.2.25 age adoption passing confidence devDependencies patch
@typescript-eslint/eslint-plugin (source) 7.5.0 -> 7.6.0 age adoption passing confidence devDependencies minor
@typescript-eslint/parser (source) 7.5.0 -> 7.6.0 age adoption passing confidence devDependencies minor
i18next (source) 23.11.0 -> 23.11.2 age adoption passing confidence dependencies patch
knip (source) 5.9.1 -> 5.9.4 age adoption passing confidence devDependencies patch
node (source) 20.12.1 -> 20.12.2 age adoption passing confidence patch
pnpm (source) 8.15.6 -> 8.15.7 age adoption passing confidence packageManager patch
prettier-plugin-packagejson 2.4.14 -> 2.5.0 age adoption passing confidence devDependencies minor
storybook (source) 8.0.6 -> 8.0.8 age adoption passing confidence devDependencies patch
typescript (source) 5.4.4 -> 5.4.5 age adoption passing confidence devDependencies patch

Release Notes

crowdin/crowdin-api-client-js (@​crowdin/crowdin-api-client)

v1.33.1

Compare Source

What's Changed
New Contributors

Full Changelog: crowdin/crowdin-api-client-js@1.33.0...1.33.1

neondatabase/serverless (@​neondatabase/serverless)

v0.9.1

Compare Source

storybookjs/storybook (@​storybook/addon-a11y)

v8.0.8

Compare Source

v8.0.7

Compare Source

storybookjs/storybook (@​storybook/addon-essentials)

v8.0.8

Compare Source

v8.0.7

Compare Source

storybookjs/storybook (@​storybook/addon-interactions)

v8.0.8

Compare Source

v8.0.7

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v7.6.0

Compare Source

🚀 Features
  • bump npm dependency ranges
❤️ Thank You
  • Abraham Guo
  • auvred
  • Brad Zacher

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v7.6.0

Compare Source

🚀 Features
  • bump npm dependency ranges
❤️ Thank You
  • Abraham Guo
  • auvred
  • Brad Zacher

You can read about our versioning strategy and releases on our website.

i18next/i18next (i18next)

v23.11.2

Compare Source

  • allow defaultValue in nested translation 2174

v23.11.1

Compare Source

  • types: remove const from ParseKeys Context type parameter and disable skipLibCheck 2169
webpro/knip (knip)

v5.9.4

Compare Source

v5.9.3

Compare Source

v5.9.2

Compare Source

  • Temporarily disable bundows install (88e6ac3)
  • Housekeeping (f923d69)
  • bun install --ignore-scripts --frozen-lockfile (b870d4d)
  • Fix up source code (cc94ba1)
  • Support, organize & pick tests to run tests in Bun + Node (c4b4001)
  • Fix other code (8ee92e0)
  • Use bun:test (e6dd426)
  • Fix up source code (52a8e0d)
  • Update CI workflows and keep using npm/npx (ccd9d95)
  • Go Bun + Biome (2fe8436)
  • fix(plugin/babel): bypass directly required plugins or presets in babel config (#​590) (77329af)
nodejs/node (node)

v20.12.2: 2024-04-10, Version 20.12.2 'Iron' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows
Commits
pnpm/pnpm (pnpm)

v8.15.7

Compare Source

matzkoh/prettier-plugin-packagejson (prettier-plugin-packagejson)

v2.5.0

Compare Source

storybookjs/storybook (storybook)

v8.0.8

Compare Source

v8.0.7

Compare Source

Microsoft/TypeScript (typescript)

v5.4.5: TypeScript 5.4.5

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:


Configuration

📅 Schedule: Branch creation - "before 4am on Monday,before 4am on Thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

vercel bot commented Apr 11, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
transmascfutures ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 15, 2024 2:55pm

@renovate renovate bot requested a review from JoeKarow as a code owner April 11, 2024 00:47
@renovate renovate bot added automerge Enable Kodiak auto-merge dependencies Change in project dependencies. labels Apr 11, 2024
Copy link

deepsource-io bot commented Apr 11, 2024

Here's the code health analysis summary for commits 4b49eb1..98b5d3e. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Secrets LogoSecrets✅ SuccessView Check ↗
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link

github-actions bot commented Apr 11, 2024

📦 Next.js Bundle Analysis for @weareinreach/glaad

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

Copy link

socket-security bot commented Apr 11, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@crowdin/crowdin-api-client@1.33.1 network Transitive: environment, filesystem +8 2.64 MB andrii.bodnar
npm/@storybook/addon-a11y@8.0.8 None +2 55.7 kB shilman
npm/@storybook/addon-essentials@8.0.8 Transitive: environment, filesystem, unsafe +66 12.6 MB shilman
npm/@storybook/addon-interactions@8.0.8 None +2 4.29 MB shilman
npm/@storybook/addon-links@8.0.8 None +2 48.8 kB shilman
npm/react-dom@18.2.0 environment +3 4.62 MB gnoff
npm/react@18.2.0 environment +2 337 kB gnoff
npm/ws@8.16.0 environment, network 0 141 kB lpinca
npm/zod@3.22.4 None 0 628 kB colinmcd94

🚮 Removed packages: npm/@crowdin/crowdin-api-client@1.33.0, npm/@neondatabase/serverless@0.9.0, npm/@storybook/addon-a11y@8.0.6, npm/@storybook/addon-essentials@8.0.6, npm/@storybook/addon-interactions@8.0.6, npm/@storybook/addon-links@8.0.6, npm/@storybook/addon-viewport@8.0.6, npm/@storybook/blocks@8.0.6, npm/@storybook/nextjs@8.0.6, npm/@storybook/react@8.0.6, npm/@storybook/test@8.0.6, npm/@tabler/icons-react@2.47.0, npm/@tanstack/react-query-devtools@4.36.1, npm/@tanstack/react-query@4.36.1, npm/@tomfreudenberg/next-auth-mock@0.5.6, npm/@trpc/client@10.45.2, npm/@trpc/next@10.45.2, npm/@trpc/react-query@10.45.2, npm/@trpc/server@10.45.2, npm/@types/luxon@3.4.2, npm/@types/node@20.12.5, npm/@types/react-dom@18.2.24, npm/@types/react@18.2.74, npm/@types/umami@0.1.5, npm/@types/ws@8.5.10, npm/@typescript-eslint/eslint-plugin@7.5.0, npm/@typescript-eslint/parser@7.5.0, npm/@vercel/analytics@1.2.2, npm/@vercel/speed-insights@1.0.10, npm/boxen@7.1.1, npm/chromatic@11.3.0, npm/dotenv-cli@7.4.1, npm/embla-carousel-auto-height@7.1.0, npm/embla-carousel-react@7.1.0, npm/eslint-config-next@14.2.1, npm/eslint-config-prettier@9.1.0, npm/eslint-formatter-github@1.1.4, npm/eslint-plugin-codegen@0.28.0, npm/eslint-plugin-i@2.29.1, npm/eslint-plugin-n@16.6.2, npm/eslint-plugin-react@7.34.1, npm/eslint-plugin-storybook@0.8.0, npm/eslint-plugin-turbo@1.13.2, npm/eslint@8.57.0, npm/husky@9.0.11, npm/i18next-browser-languagedetector@7.2.1, npm/i18next-http-backend@2.5.0, npm/i18next@23.11.0

View full report↗︎

Copy link

coderabbitai bot commented Apr 12, 2024

Important

Auto Review Skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger a review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

socket-security bot commented Apr 12, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎

Copy link
Contributor

kodiakhq bot commented Apr 15, 2024

This PR currently has a merge conflict. Please resolve this and then re-add the automerge label.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ec6d40a to 98b5d3e Compare April 15, 2024 14:53
Copy link

sonarcloud bot commented Apr 15, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@kodiakhq kodiakhq bot merged commit c788bfb into dev Apr 15, 2024
17 checks passed
@kodiakhq kodiakhq bot deleted the renovate/all-minor-patch branch April 15, 2024 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Change in project dependencies.
Development

Successfully merging this pull request may close these issues.

1 participant