dependabot[bot]
47420d7476
Bump the npm_and_yarn group across 3 directories with 3 updates ( #3087 )
...
Bumps the npm_and_yarn group with 3 updates in the / directory:
[next](https://github.com/vercel/next.js ),
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) and
[jose](https://github.com/panva/jose ).
Bumps the npm_and_yarn group with 1 update in the /templates/nextjs
directory: [next](https://github.com/vercel/next.js ).
Updates `next` from 14.0.4 to 14.1.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases ">next's
releases</a>.</em></p>
<blockquote>
<h2>v14.1.2</h2>
<p><em>Note: this is a backport release for critical bug fixes -- this
does not include all pending features/changes on canary</em></p>
<h3>Core Changes</h3>
<ul>
<li>Fix sitemap generateSitemaps support for string id (<a
href="https://redirect.github.com/vercel/next.js/issues/61088 ">#61088</a>)</li>
<li>Fix: generateSitemaps in production giving 404 (<a
href="https://redirect.github.com/vercel/next.js/issues/62212 ">#62212</a>)</li>
<li>Fix redirect under suspense boundary with basePath (<a
href="https://redirect.github.com/vercel/next.js/issues/62597 ">#62597</a>)</li>
<li>Fix: Add stricter check for "use server" exports (<a
href="https://redirect.github.com/vercel/next.js/issues/62821 ">#62821</a>)</li>
<li>ensure server action errors notify rejection handlers (<a
href="https://redirect.github.com/vercel/next.js/issues/61588 ">#61588</a>)</li>
<li>make router restore action resilient to a missing tree (<a
href="https://redirect.github.com/vercel/next.js/issues/62098 ">#62098</a>)</li>
<li>build: remove sentry from the externals list <a
href="https://redirect.github.com/vercel/next.js/issues/61194 ">#61194</a></li>
<li>Reduce memory/cache overhead from over loader processing <a
href="https://redirect.github.com/vercel/next.js/issues/62005 ">#62005</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/huozhi "><code>@huozhi</code></a>, <a
href="https://github.com/shuding "><code>@shuding</code></a>, <a
href="https://github.com/Ethan-Arrowood "><code>@Ethan-Arrowood</code></a>,
<a href="https://github.com/styfle "><code>@styfle</code></a>, <a
href="https://github.com/ijjk "><code>@ijjk</code></a>, <a
href="https://github.com/ztanner "><code>@ztanner</code></a>, <a
href="https://github.com/balazsorban44 "><code>@balazsorban44</code></a>,
<a href="https://github.com/kdy1 "><code>@kdy1</code></a>, and <a
href="https://github.com/williamli "><code>@williamli</code></a> for
helping!</p>
<h2>v14.1.2-canary.7</h2>
<h3>Core Changes</h3>
<ul>
<li>remove reducer unit tests: <a
href="https://redirect.github.com/vercel/next.js/issues/62766 ">#62766</a></li>
</ul>
<h3>Documentation Changes</h3>
<ul>
<li>Update sitemap.mdx: <a
href="https://redirect.github.com/vercel/next.js/issues/62809 ">#62809</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/ztanner "><code>@ztanner</code></a> and <a
href="https://github.com/devr77 "><code>@devr77</code></a> for
helping!</p>
<h2>v14.1.2-canary.6</h2>
<h3>Core Changes</h3>
<ul>
<li>fix: Add stricter check for "use server" exports: <a
href="https://redirect.github.com/vercel/next.js/issues/62821 ">#62821</a></li>
<li>fix(next-core): throw on invalid metadata handler: <a
href="https://redirect.github.com/vercel/next.js/issues/62829 ">#62829</a></li>
<li>Revert "Add experimental config for navigation raf test (<a
href="https://redirect.github.com/vercel/next.js/issues/62668 ">#62668</a>)":
<a
href="https://redirect.github.com/vercel/next.js/issues/62834 ">#62834</a></li>
<li>Revert "refactor(analysis): rust based page-static-info,
deprecate js parse interface in next-swc": <a
href="https://redirect.github.com/vercel/next.js/issues/62838 ">#62838</a></li>
</ul>
<h3>Example Changes</h3>
<ul>
<li>Fix with-supertokens example: <a
href="https://redirect.github.com/vercel/next.js/issues/62817 ">#62817</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/shuding "><code>@shuding</code></a>, <a
href="https://github.com/kwonoj "><code>@kwonoj</code></a>, <a
href="https://github.com/ijjk "><code>@ijjk</code></a>, and <a
href="https://github.com/timneutkens "><code>@timneutkens</code></a> for
helping!</p>
<h2>v14.1.2-canary.5</h2>
<h3>Core Changes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc38ee190c85a5c4d1ee4b059bc042https://github.com/edge-runtime "><code>@edge-runtime</code></a>
packages (<a
href="https://redirect.github.com/vercel/next.js/issues/62955 ">#62955</a>)</li>
<li><a
href="b10a6105a9https://redirect.github.com/vercel/next.js/issues/62064 ">#62064</a>)</li>
<li><a
href="960b738b8ahttps://redirect.github.com/vercel/next.js/issues/62606 ">#62606</a>)</li>
<li><a
href="2f210d448af564deef86a85519e715https://redirect.github.com/vercel/next.js/issues/61088 ">#61088</a>)</li>
<li><a
href="0a2d7754edhttps://redirect.github.com/vercel/next.js/issues/62212 ">#62212</a>)</li>
<li><a
href="400b57cf22https://redirect.github.com/vercel/next.js/issues/62597 ">#62597</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v14.0.4...v14.1.3 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.1.4 to 5.1.5
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->5.1.5 (2024-03-04)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: <code>__vite__mapDeps</code> code injection (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15732 ">#15732</a>)
(<a href="https://github.com/vitejs/vite/commit/aff54e1 ">aff54e1</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15732 ">#15732</a></li>
<li>fix: analysing build chunk without dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15469 ">#15469</a>)
(<a href="https://github.com/vitejs/vite/commit/bd52283 ">bd52283</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15469 ">#15469</a></li>
<li>fix: import with query with imports field (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16085 ">#16085</a>)
(<a href="https://github.com/vitejs/vite/commit/ab823ab ">ab823ab</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16085 ">#16085</a></li>
<li>fix: normalize literal-only entry pattern (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16010 ">#16010</a>)
(<a href="https://github.com/vitejs/vite/commit/1dccc37 ">1dccc37</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16010 ">#16010</a></li>
<li>fix: optimizeDeps.entries with literal-only pattern(s) (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15853 ">#15853</a>)
(<a href="https://github.com/vitejs/vite/commit/49300b3 ">49300b3</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15853 ">#15853</a></li>
<li>fix: output correct error for empty import specifier (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16055 ">#16055</a>)
(<a href="https://github.com/vitejs/vite/commit/a9112eb ">a9112eb</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16055 ">#16055</a></li>
<li>fix: upgrade esbuild to 0.20.x (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16062 ">#16062</a>)
(<a href="https://github.com/vitejs/vite/commit/899d9b1 ">899d9b1</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16062 ">#16062</a></li>
<li>fix(runtime): runtime HMR affects only imported files (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15898 ">#15898</a>)
(<a href="https://github.com/vitejs/vite/commit/57463fc ">57463fc</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15898 ">#15898</a></li>
<li>fix(scanner): respect <code>experimentalDecorators: true</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15206 ">#15206</a>)
(<a href="https://github.com/vitejs/vite/commit/4144781 ">4144781</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15206 ">#15206</a></li>
<li>revert: "fix: upgrade esbuild to 0.20.x" (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16072 ">#16072</a>)
(<a href="https://github.com/vitejs/vite/commit/11cceea ">11cceea</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16072 ">#16072</a></li>
<li>refactor: share code with vite runtime (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15907 ">#15907</a>)
(<a href="https://github.com/vitejs/vite/commit/b20d542 ">b20d542</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/15907 ">#15907</a></li>
<li>refactor(runtime): use functions from <code>pathe</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16061 ">#16061</a>)
(<a href="https://github.com/vitejs/vite/commit/aac2ef7 ">aac2ef7</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16061 ">#16061</a></li>
<li>chore(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16028 ">#16028</a>)
(<a href="https://github.com/vitejs/vite/commit/7cfe80d ">7cfe80d</a>),
closes <a
href="https://redirect.github.com/vitejs/vite/issues/16028 ">#16028</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2af1ae807dbd52283a70https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15469 ">#15469</a>)</li>
<li><a
href="ab823ab618https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16085 ">#16085</a>)</li>
<li><a
href="11cceeab39https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16072 ">#16072</a>)</li>
<li><a
href="899d9b1d27https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16062 ">#16062</a>)</li>
<li><a
href="aac2ef7752https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16061 ">#16061</a>)</li>
<li><a
href="a9112ebb21https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16055 ">#16055</a>)</li>
<li><a
href="1dccc3713ahttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16010 ">#16010</a>)</li>
<li><a
href="7cfe80d0dfhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16028 ">#16028</a>)</li>
<li><a
href="b20d54257ehttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15907 ">#15907</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v5.1.5/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `jose` from 4.15.4 to 4.15.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/panva/jose/releases ">jose's
releases</a>.</em></p>
<blockquote>
<h2>v4.15.5</h2>
<h3>Fixes</h3>
<ul>
<li>add a maxOutputLength option to zlib inflate (<a
href="1b91d88d2fhttps://github.com/panva/jose/security/advisories/GHSA-hhhv-q57g-882q ">CVE-2024-28176</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/panva/jose/blob/v4.15.5/CHANGELOG.md ">jose's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/panva/jose/compare/v4.15.4...v4.15.5 ">4.15.5</a>
(2024-03-07)</h2>
<h3>Fixes</h3>
<ul>
<li>add a maxOutputLength option to zlib inflate (<a
href="1b91d88d2f765aafd226b36e45e008e839ecbd791b91d88d2f9ca2b2427df3035d8897https://github.com/panva/jose/compare/v4.15.4...v4.15.5 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~panva ">panva</a>, a new releaser for jose
since your current version.</p>
</details>
<br />
Updates `next` from 13.4.6 to 13.5.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases ">next's
releases</a>.</em></p>
<blockquote>
<h2>v14.1.2</h2>
<p><em>Note: this is a backport release for critical bug fixes -- this
does not include all pending features/changes on canary</em></p>
<h3>Core Changes</h3>
<ul>
<li>Fix sitemap generateSitemaps support for string id (<a
href="https://redirect.github.com/vercel/next.js/issues/61088 ">#61088</a>)</li>
<li>Fix: generateSitemaps in production giving 404 (<a
href="https://redirect.github.com/vercel/next.js/issues/62212 ">#62212</a>)</li>
<li>Fix redirect under suspense boundary with basePath (<a
href="https://redirect.github.com/vercel/next.js/issues/62597 ">#62597</a>)</li>
<li>Fix: Add stricter check for "use server" exports (<a
href="https://redirect.github.com/vercel/next.js/issues/62821 ">#62821</a>)</li>
<li>ensure server action errors notify rejection handlers (<a
href="https://redirect.github.com/vercel/next.js/issues/61588 ">#61588</a>)</li>
<li>make router restore action resilient to a missing tree (<a
href="https://redirect.github.com/vercel/next.js/issues/62098 ">#62098</a>)</li>
<li>build: remove sentry from the externals list <a
href="https://redirect.github.com/vercel/next.js/issues/61194 ">#61194</a></li>
<li>Reduce memory/cache overhead from over loader processing <a
href="https://redirect.github.com/vercel/next.js/issues/62005 ">#62005</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/huozhi "><code>@huozhi</code></a>, <a
href="https://github.com/shuding "><code>@shuding</code></a>, <a
href="https://github.com/Ethan-Arrowood "><code>@Ethan-Arrowood</code></a>,
<a href="https://github.com/styfle "><code>@styfle</code></a>, <a
href="https://github.com/ijjk "><code>@ijjk</code></a>, <a
href="https://github.com/ztanner "><code>@ztanner</code></a>, <a
href="https://github.com/balazsorban44 "><code>@balazsorban44</code></a>,
<a href="https://github.com/kdy1 "><code>@kdy1</code></a>, and <a
href="https://github.com/williamli "><code>@williamli</code></a> for
helping!</p>
<h2>v14.1.2-canary.7</h2>
<h3>Core Changes</h3>
<ul>
<li>remove reducer unit tests: <a
href="https://redirect.github.com/vercel/next.js/issues/62766 ">#62766</a></li>
</ul>
<h3>Documentation Changes</h3>
<ul>
<li>Update sitemap.mdx: <a
href="https://redirect.github.com/vercel/next.js/issues/62809 ">#62809</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/ztanner "><code>@ztanner</code></a> and <a
href="https://github.com/devr77 "><code>@devr77</code></a> for
helping!</p>
<h2>v14.1.2-canary.6</h2>
<h3>Core Changes</h3>
<ul>
<li>fix: Add stricter check for "use server" exports: <a
href="https://redirect.github.com/vercel/next.js/issues/62821 ">#62821</a></li>
<li>fix(next-core): throw on invalid metadata handler: <a
href="https://redirect.github.com/vercel/next.js/issues/62829 ">#62829</a></li>
<li>Revert "Add experimental config for navigation raf test (<a
href="https://redirect.github.com/vercel/next.js/issues/62668 ">#62668</a>)":
<a
href="https://redirect.github.com/vercel/next.js/issues/62834 ">#62834</a></li>
<li>Revert "refactor(analysis): rust based page-static-info,
deprecate js parse interface in next-swc": <a
href="https://redirect.github.com/vercel/next.js/issues/62838 ">#62838</a></li>
</ul>
<h3>Example Changes</h3>
<ul>
<li>Fix with-supertokens example: <a
href="https://redirect.github.com/vercel/next.js/issues/62817 ">#62817</a></li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/shuding "><code>@shuding</code></a>, <a
href="https://github.com/kwonoj "><code>@kwonoj</code></a>, <a
href="https://github.com/ijjk "><code>@ijjk</code></a>, and <a
href="https://github.com/timneutkens "><code>@timneutkens</code></a> for
helping!</p>
<h2>v14.1.2-canary.5</h2>
<h3>Core Changes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc38ee190c85a5c4d1ee4b059bc042https://github.com/edge-runtime "><code>@edge-runtime</code></a>
packages (<a
href="https://redirect.github.com/vercel/next.js/issues/62955 ">#62955</a>)</li>
<li><a
href="b10a6105a9https://redirect.github.com/vercel/next.js/issues/62064 ">#62064</a>)</li>
<li><a
href="960b738b8ahttps://redirect.github.com/vercel/next.js/issues/62606 ">#62606</a>)</li>
<li><a
href="2f210d448af564deef86a85519e715https://redirect.github.com/vercel/next.js/issues/61088 ">#61088</a>)</li>
<li><a
href="0a2d7754edhttps://redirect.github.com/vercel/next.js/issues/62212 ">#62212</a>)</li>
<li><a
href="400b57cf22https://redirect.github.com/vercel/next.js/issues/62597 ">#62597</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v14.0.4...v14.1.3 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/tldraw/tldraw/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Mitja Bezenšek <mitja.bezensek@gmail.com>
2024-03-11 12:16:46 +00:00
Dan Groshev
cc1e5196dd
Use github actions to mirror templates from monorepo to appropriate repos ( #2781 )
...
The idea here is to mirror project templates from our monorepo to the
corresponding "top level" repos in our organisation. The main benefits
are:
- being able to easily synchronise template versions to the last release
on release
- being able to test those templates together with the rest of the
project
- being able to deploy the unreleased version of the templates
However, this PR will only do the synchronisation part. The main
roadblock for the latter at the moment is running `yarn install` on
packages in the current `main` that are still unreleased. There are ways
around that, but this PR is deliberately minimalistic to land it sooner.
### Change Type
- [x] `internal` — Any other changes that don't affect the published
package
---------
Co-authored-by: Taha <98838967+Taha-Hassan-Git@users.noreply.github.com>
2024-02-29 10:48:31 +00:00
Steve Ruiz