Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #437

Merged
merged 1 commit into from
Jun 25, 2024
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 20, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change OpenSSF
@crowdin/crowdin-api-client dependencies patch 1.33.1 -> 1.33.2 OpenSSF Scorecard
@prisma/adapter-neon (source) dependencies minor 5.15.1 -> 5.16.0 OpenSSF Scorecard
@prisma/client (source) dependencies minor 5.15.1 -> 5.16.0 OpenSSF Scorecard
@types/node (source) devDependencies patch 20.14.5 -> 20.14.8 OpenSSF Scorecard
@typescript-eslint/eslint-plugin (source) devDependencies minor 7.13.1 -> 7.14.1 OpenSSF Scorecard
@typescript-eslint/parser (source) devDependencies minor 7.13.1 -> 7.14.1 OpenSSF Scorecard
eslint-plugin-react devDependencies patch 7.34.2 -> 7.34.3 OpenSSF Scorecard
knip (source) devDependencies minor 5.21.2 -> 5.23.0 OpenSSF Scorecard
listr2 devDependencies patch 8.2.1 -> 8.2.3 OpenSSF Scorecard
node (source) minor 20.14.0 -> 20.15.0 OpenSSF Scorecard
prisma (source) devDependencies minor 5.15.1 -> 5.16.0 OpenSSF Scorecard
tsx (source) devDependencies patch 4.15.6 -> 4.15.7 OpenSSF Scorecard
typescript (source) devDependencies minor 5.4.5 -> 5.5.2 OpenSSF Scorecard

Release Notes

crowdin/crowdin-api-client-js (@​crowdin/crowdin-api-client)

v1.33.2

Compare Source

What's Changed

Full Changelog: crowdin/crowdin-api-client-js@1.33.1...1.33.2

prisma/prisma (@​prisma/adapter-neon)

v5.16.0

Compare Source

🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟

Highlights

Omit model fields globally

With Prisma ORM 5.16.0 we’re more than happy to announce that we’re expanding the omitApi Preview feature to also include the ability to omit fields globally.

When the Preview feature is enabled, you’re able to define fields to omit when instantiating Prisma Client.

const prisma = new PrismaClient({
  omit: {
    user: {
      // make sure that password is never queried.
      password: true,
    },
  },
});

You’re also able to omit fields from multiple models and multiple fields from the same model

const prisma = new PrismaClient({
  omit: {
    user: { 
      // make sure that password and internalId are never queried.
      password: true,
      internalId: true,
    },
    post: {
      secretkey: true,
    },
  },
});

With both local and global omit, you now have the flexibility to completely remove sensitive fields while also tailoring individual queries. If you need the ability to generally omit a field except in a specific query, you can also overwrite a global omit locally

const prisma = new PrismaClient({
  omit: {
    user: { 
      // password is omitted globally.
      password: true,
    },
  },
});

const userWithPassword = await prisma.user.findUnique({
  omit: { password: false }, // omit now false, so password is returned
  where: { id: 1 },
});
Changes to prismaSchemaFolder

In 5.15.0 we released the prismaSchemaFolder Preview feature, allowing you to create multiple Prisma Schema files in a prisma/schema directory. We’ve gotten a lot of great feedback and are really excited with how the community has been using the feature.

To continue improving our multi-file schema support, we have a few breaking changes to the prismaSchemaFolder feature:

  • When using relative paths in Prisma Schema files with the prismaSchemaFolder feature, a path is now relative to the file it is defined in rather than relative to the prisma/schema folder. This means that if you have a generator block in /project/prisma/schema/config/generator.prisma with an output of ./foo the output will be resolved to /project/prisma/schema/config/foo rather than /project/prisma/foo. The path to a SQLite file will be resolved in the same manner.
  • We realized that during migration many people would have prisma/schema as well as prisma/schema.prisma. Our initial implementation looked for a .prisma file first and would ignore the schema folder if it exists. This is now an error.
Changes to fullTextSearch

In order to improve our full-text search implementation we have made a breaking change to the fullTextSearch Preview feature.

Previously, when the feature was enabled we updated the <Model>OrderByWithRelationInput TypeScript type with the <Model>OrderByWithRelationAndSearchRelevanceInput type. However, we have noted that there are no cases where relational ordering is needed but search relevance is not. Thus, we have decided to remove the <Model>OrderByWithRelationAndSearchRelevanceInput naming and only use the <Model>OrderByWithRelationInput naming.

Fixes and improvements

Prisma
Language tools (e.g. VS Code)
Prisma Engines

Credits

Huge thanks to @​key-moon, @​pranayat, @​yubrot, @​skyzh, @​brian-dlee, @​mydea, @​nickcarnival, @​eruditmorina, @​nzakas, @​gutyerrez, @​avallete, @​ceddy4395, @​Kayoshi-dev, @​yehonatanz for helping!

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v7.14.1

Compare Source

🩹 Fixes
  • eslint-plugin: [prefer-nullish-coalescing] treat enums and literals as their underlying primitive types

  • eslint-plugin: [prefer-nullish-coalescing] ensure ternary fix does not remove parens

❤️ Thank You
  • Jake Bailey

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features
  • support TypeScript 5.5
🩹 Fixes
  • eslint-plugin: [no-extraneous-class] handle abstract members

  • eslint-plugin: [prefer-nullish-coalescing] handle intersected primitive types

  • eslint-plugin: [no-invalid-this] support AccessorProperty

❤️ Thank You
  • Brad Zacher
  • cm-ayf
  • Jake Bailey
  • James Zhan
  • Joshua Chen
  • yoshi2no

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v7.14.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v7.14.0

Compare Source

🚀 Features
  • support TypeScript 5.5
❤️ Thank You
  • Brad Zacher
  • cm-ayf
  • Jake Bailey
  • James Zhan
  • Joshua Chen
  • yoshi2no

You can read about our versioning strategy and releases on our website.

jsx-eslint/eslint-plugin-react (eslint-plugin-react)

v7.34.3

Compare Source

Fixed
  • [prop-types]: null-check rootNode before calling getScope (#​3762 @​crnhrv)
  • [boolean-prop-naming]: avoid a crash with a spread prop (#​3733 @​ljharb)
  • [jsx-boolean-value]: assumeUndefinedIsFalse with never must not allow explicit true value (#​3757 @​6uliver)
  • [no-object-type-as-default-prop]: enable rule for components with many parameters (#​3768 @​JulienR1)
  • [jsx-key]: incorrect behavior for checkKeyMustBeforeSpread with map callbacks (#​3769 @​akulsr0)
webpro-nl/knip (knip)

v5.23.0

Compare Source

v5.22.3

Compare Source

  • Try harder looking up strictly-ns-references recursively (#​690) (4cf1337)
  • Also traverse into re-exports and re-exported aliases when looking up strictly-ns-references (resolves #​690) (b98c5b9)
  • Update docs (e906674)
  • Add support for graphql-codegen plugin level config (resolves #​692) (#​693) (71de7f1)

v5.22.2

Compare Source

  • Fix abs extended tsconfig paths if internal (resolves #​689) (d1261c1)
  • Update release-it and use JSON schema (a4111fe)

v5.22.1

Compare Source

v5.22.0

Compare Source

  • Replace file-entry-cache with custom impl + built-in serializer (7aa2f6d)
listr2/listr2 (listr2)

v8.2.3

Compare Source

listr2 8.2.3 (2024-06-21)

Bug Fixes
  • process-output: trick inquirer and such to not wrap on their own (78b9a90)

v8.2.2

Compare Source

listr2 8.2.2 (2024-06-19)

Bug Fixes
  • deps: update dependencies (642d3f7)
nodejs/node (node)

v20.15.0: 2024-06-20, Version 20.15.0 'Iron' (LTS), @​marco-ippolito

Compare Source

test_runner: support test plans

It is now possible to count the number of assertions and subtests that are expected to run within a test. If the number of assertions and subtests that run does not match the expected count, the test will fail.

test('top level test', (t) => {
  t.plan(2);
  t.assert.ok('some relevant assertion here');
  t.subtest('subtest', () => {});
});

Contributed by Colin Ihrig in #​52860

inspector: introduce the --inspect-wait flag

This release introduces the --inspect-wait flag, which allows debugger to wait for attachement. This flag is useful when you want to debug the code from the beginning. Unlike --inspect-brk, which breaks on the first line, this flag waits for debugger to be connected and then runs the code as soon as a session is established.

Contributed by Kohei Ueno in #​52734

zlib: expose zlib.crc32()

This release exposes the crc32() function from zlib to user-land.

It computes a 32-bit Cyclic Redundancy Check checksum of data. If
value is specified, it is used as the starting value of the checksum,
otherwise, 0 is used as the starting value.

The CRC algorithm is designed to compute checksums and to detect error
in data transmission. It's not suitable for cryptographic authentication.

const zlib = require('node:zlib');
const { Buffer } = require('node:buffer');

let crc = zlib.crc32('hello');  // 907060870
crc = zlib.crc32('world', crc);  // 4192936109

crc = zlib.crc32(Buffer.from('hello', 'utf16le'));  // 1427272415
crc = zlib.crc32(Buffer.from('world', 'utf16le'), crc);  // 4150509955

Contributed by Joyee Cheung in #​52692

cli: allow running wasm in limited vmem with --disable-wasm-trap-handler

By default, Node.js enables trap-handler-based WebAssembly bound
checks. As a result, V8 does not need to insert inline bound checks
int the code compiled from WebAssembly which may speedup WebAssembly
execution significantly, but this optimization requires allocating
a big virtual memory cage (currently 10GB). If the Node.js process
does not have access to a large enough virtual memory address space
due to system configurations or hardware limitations, users won't
be able to run any WebAssembly that involves allocation in this
virtual memory cage and will see an out-of-memory error.

$ ulimit -v 5000000
$ node -p "new WebAssembly.Memory({ initial: 10, maximum: 100 });"
[eval]:1
new WebAssembly.Memory({ initial: 10, maximum: 100 });
^

RangeError: WebAssembly.Memory(): could not allocate memory
    at [eval]:1:1
    at runScriptInThisContext (node:internal/vm:209:10)
    at node:internal/process/execution:118:14
    at [eval]-wrapper:6:24
    at runScript (node:internal/process/execution:101:62)
    at evalScript (node:internal/process/execution:136:3)
    at node:internal/main/eval_string:49:3

--disable-wasm-trap-handler disables this optimization so that
users can at least run WebAssembly (with a less optimial performance)
when the virtual memory address space available to their Node.js
process is lower than what the V8 WebAssembly memory cage needs.

Contributed by Joyee Cheung in #​52766

Other Notable Changes
Commits
privatenumber/tsx (tsx)

v4.15.7

Compare Source

Bug Fixes

This release is also available on:

Microsoft/TypeScript (typescript)

v5.5.2

Compare Source


Configuration

📅 Schedule: Branch creation - "before 4am on Monday,before 4am on Thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from JoeKarow as a code owner June 20, 2024 00:03
@renovate renovate bot added automerge Enable Kodiak auto-merge dependencies Change in project dependencies. labels Jun 20, 2024
Copy link

vercel bot commented Jun 20, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
transmascfutures ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 25, 2024 5:18pm

Copy link

coderabbitai bot commented Jun 20, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

deepsource-io bot commented Jun 20, 2024

Here's the code health analysis summary for commits 40957c4..73b28fc. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Secrets LogoSecrets✅ SuccessView Check ↗
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link

socket-security bot commented Jun 20, 2024

Copy link

relativeci bot commented Jun 20, 2024

#168 Bundle Size — 18.74MiB (~+0.01%).

73b28fc(current) vs 2a84db3 dev#143(baseline)

Bundle metrics  Change 2 changes Regression 1 regression
                 Current
#168
     Baseline
#143
Regression  Initial JS 1008.14KiB(~+0.01%) 1008.12KiB
No change  Initial CSS 6.61KiB 6.61KiB
Change  Cache Invalidation 1.63% 2.91%
No change  Chunks 20 20
No change  Assets 80 80
No change  Modules 790 790
No change  Duplicate Modules 103 103
No change  Duplicate Code 5.61% 5.61%
No change  Packages 81 81
No change  Duplicate Packages 0 0
Bundle size by type  Change 1 change Regression 1 regression
                 Current
#168
     Baseline
#143
No change  IMG 17.47MiB 17.47MiB
Regression  JS 1.08MiB (~+0.01%) 1.08MiB
No change  Fonts 189.64KiB 189.64KiB
No change  CSS 6.61KiB 6.61KiB
No change  Other 4.07KiB 4.07KiB

Bundle analysis reportBranch renovate/all-minor-patchProject dashboard

Copy link

socket-security bot commented Jun 20, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 95e12c9 to e6191fd Compare June 20, 2024 16:15
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Jun 20, 2024
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e6191fd to a6f4099 Compare June 20, 2024 19:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a6f4099 to 3c5a86c Compare June 20, 2024 23:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3c5a86c to 035324a Compare June 21, 2024 07:53
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 035324a to 9e562a0 Compare June 21, 2024 11:26
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 9e562a0 to d36e05b Compare June 21, 2024 15:00
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from d36e05b to 6ff975c Compare June 22, 2024 11:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6ff975c to 4ad655d Compare June 24, 2024 16:42
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4ad655d to cc3d511 Compare June 24, 2024 20:03
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from cc3d511 to 4c744c1 Compare June 25, 2024 12:50
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4c744c1 to 73b28fc Compare June 25, 2024 17:16
Copy link

sonarcloud bot commented Jun 25, 2024

@kodiakhq kodiakhq bot merged commit 20a9ae0 into dev Jun 25, 2024
19 of 20 checks passed
@kodiakhq kodiakhq bot deleted the renovate/all-minor-patch branch June 25, 2024 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge Enable Kodiak auto-merge dependencies Change in project dependencies.
Development

Successfully merging this pull request may close these issues.

1 participant