Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , , , , , , , , , , , , cheerio, next, pdfjs-dist, react-resizable-panels, rehype-katex, sharp, tiktoken, zustand #5

Open
wants to merge 1 commit into
base: main-stable
Choose a base branch
from

Conversation

black-da-bull
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@emotion/cache
from 11.11.0 to 11.13.1 | 3 versions ahead of your current version | 2 months ago
on 2024-07-25
@emotion/styled
from 11.11.5 to 11.13.0 | 2 versions ahead of your current version | 2 months ago
on 2024-07-20
@emotion/react
from 11.11.4 to 11.13.3 | 3 versions ahead of your current version | 22 days ago
on 2024-08-21
@mui/icons-material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@next/bundle-analyzer
from 14.2.3 to 14.2.5 | 2 versions ahead of your current version | 2 months ago
on 2024-07-10
@next/third-parties
from 14.2.3 to 14.2.5 | 2 versions ahead of your current version | 2 months ago
on 2024-07-10
@prisma/client
from 5.13.0 to 5.18.0 | 421 versions ahead of your current version | a month ago
on 2024-08-06
@t3-oss/env-nextjs
from 0.10.1 to 0.11.0 | 1 version ahead of your current version | 2 months ago
on 2024-07-22
@trpc/client
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/next
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/react-query
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/server
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@vercel/analytics
from 1.2.2 to 1.3.1 | 2 versions ahead of your current version | 4 months ago
on 2024-05-24
@vercel/speed-insights
from 1.0.10 to 1.0.12 | 2 versions ahead of your current version | 3 months ago
on 2024-06-12
cheerio
from 1.0.0-rc.12 to 1.0.0 | 1 version ahead of your current version | a month ago
on 2024-08-09
next
from 14.1.4 to 14.2.5 | 82 versions ahead of your current version | 2 months ago
on 2024-07-10
pdfjs-dist
from 4.2.67 to 4.5.136 | 3 versions ahead of your current version | 2 months ago
on 2024-07-27
react-resizable-panels
from 2.0.19 to 2.1.1 | 6 versions ahead of your current version | 21 days ago
on 2024-08-21
rehype-katex
from 7.0.0 to 7.0.1 | 1 version ahead of your current version | 23 days ago
on 2024-08-19
sharp
from 0.33.3 to 0.33.5 | 5 versions ahead of your current version | a month ago
on 2024-08-16
tiktoken
from 1.0.15 to 1.0.16 | 1 version ahead of your current version | a month ago
on 2024-08-15
zustand
from 4.5.2 to 4.5.5 | 3 versions ahead of your current version | a month ago
on 2024-08-15

Release notes
Package name: @emotion/cache
  • 11.13.1 - 2024-07-25

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.0 - 2023-05-06
from @emotion/cache GitHub release notes
Package name: @emotion/styled
  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.5 - 2024-03-29
from @emotion/styled GitHub release notes
Package name: @emotion/react
  • 11.13.3 - 2024-08-21

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.4 - 2024-02-27
from @emotion/react GitHub release notes
Package name: @mui/icons-material from @mui/icons-material GitHub release notes
Package name: @mui/material from @mui/material GitHub release notes
Package name: @next/bundle-analyzer
  • 14.2.5 - 2024-07-10

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • avoid merging global css in a way that leaks into other chunk groups (#67373)
    • Fix server action edge redirect with middleware rewrite (#67148)
    • fix(next): reject protocol-relative URLs in image optimization (#65752)
    • fix(next-swc): correct path interop to filepath for wasm (#65633)
    • Use addDependency to track metadata route file changes (#66714)
    • Fix noindex is missing on static not-found page (#67135)
    • perf: improve retrieving versionInfo on Turbo HMR (#67309)
    • fix(next/image): handle invalid url (#67465)
    • fix(next): initial prefetch cache not set properly with different search params (#65977)
    • fix: Backport class properties fix (#67377)
    • Upgrade acorn (#67592)

    Misc

    • Log stdio for pull-turbo-cache script (#66759)
    • Ensure turbo is setup when building in docker (#66804)

    Credits

    Huge thanks to @ devjiwonchoi, @ ijjk, @ emmerich, @ huozhi, @ kdy1, @ kwonoj, @ styfle, and @ sokra for helping!

  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/bundle-analyzer GitHub release notes
Package name: @next/third-parties
  • 14.2.5 - 2024-07-10

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • avoid merging global css in a way that leaks into other chunk groups (#67373)
    • Fix server action edge redirect with middleware rewrite (#67148)
    • fix(next): reject protocol-relative URLs in image optimization (#65752)
    • fix(next-swc): correct path interop to filepath for wasm (#65633)
    • Use addDependency to track metadata route file changes (#66714)
    • Fix noindex is missing on static not-found page (#67135)
    • perf: improve retrieving versionInfo on Turbo HMR (#67309)
    • fix(next/image): handle invalid url (#67465)
    • fix(next): initial prefetch cache not set properly with different search params (#65977)
    • fix: Backport class properties fix (#67377)
    • Upgrade acorn (#67592)

    Misc

    • Log stdio for pull-turbo-cache script (#66759)
    • Ensure turbo is setup when building in docker (#66804)

    Credits

    Huge thanks to @ devjiwonchoi, @ ijjk, @ emmerich, @ huozhi, @ kdy1, @ kwonoj, @ styfle, and @ sokra for helping!

  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/third-parties GitHub release notes
Package name: @prisma/client
  • 5.18.0 - 2024-08-06

    🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟

    Highlights

    Native support for UUIDv7

    Previous to this release, the Prisma Schema function uuid() did not accept any arguments and created a UUIDv4 ID. While sufficient in many cases, UUIDv4 has a few drawbacks, namely that it is not temporally sortable.

    UUIDv7 attempts to resolve this issue, making it easy to temporally sort your database rows by ID!

    To support this, we’ve updated the uuid() function in Prisma Schema to accept an optional, integer argument. Right now, the only valid values are 4 and 7, with 4 being the default.

    model User {
    id String @id @default(uuid()) // defaults to 4
    name String
    }

    model User {
    id String @id @default(uuid(4)) // same as above, but explicit
    name String
    }

    model User {
    id String @id @default(uuid(7)) // will use UUIDv7 instead of UUIDv4
    name String
    }

    Bug squashing

    We’ve squashed a number of bugs this release, special thanks to everyone who helped us! A few select highlights are:

    Fixes and improvements

    Prisma

    Language tools (e.g. VS Code)

    Share your feedback about Prisma ORM

    We want to know how you like working with Prisma ORM in your projects! Please take our 2min survey and let us know what you like or where we can improve 🙏

    Credits

    Huge thanks to @ mcuelenaere, @ pagewang0, @ Druue, @ key-moon, @ Jolg42, @ pranayat, @ ospfranco, @ yubrot, @ skyzh, @ haaawk for helping!

  • 5.18.0-integration-revert-24949-fix-ts-version.1 - 2024-08-06
  • 5.18.0-integration-fix-config-dir-client.5 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.4 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.3 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.2 - 2024-07-17
  • 5.18.0-integration-fix-config-dir-client.1 - 2024-07-17
  • 5.18.0-integration-feat-typed-sql.9 - 2024-08-05
  • 5.18.0-integration-feat-typed-sql.8 - 2024-08-05
  • 5.18.0-integration-feat-typed-sql.7 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.6 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.5 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.4 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.3 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.2 - 2024-07-29
  • 5.18.0-integration-feat-typed-sql.1 - 2024-07-29
  • 5.18.0-integration-engines-5-18-0-9-feat-gh-actions-0b3765edade679247b3c9856bcabbcdc1736853e.1 - 2024-07-19
  • 5.18.0-integration-engines-5-18-0-7-feat-gh-actions-462cf67beffd0cc97802a8034d58a38ec9c58b99.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-6-feat-gh-actions-19bafc70f9e564e8f5792bd8a9cd4bad4df5748e.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-5-feat-gh-actions-5f2a1d1133b515a5b4cbf1b17ef011a9fe22b559.1 - 2024-07-17 ...

Snyk has created this PR to upgrade:
  - @emotion/cache from 11.11.0 to 11.13.1.
    See this package in npm: https://www.npmjs.com/package/@emotion/cache
  - @emotion/styled from 11.11.5 to 11.13.0.
    See this package in npm: https://www.npmjs.com/package/@emotion/styled
  - @emotion/react from 11.11.4 to 11.13.3.
    See this package in npm: https://www.npmjs.com/package/@emotion/react
  - @mui/icons-material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/icons-material
  - @mui/material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/material
  - @next/bundle-analyzer from 14.2.3 to 14.2.5.
    See this package in npm: https://www.npmjs.com/package/@next/bundle-analyzer
  - @next/third-parties from 14.2.3 to 14.2.5.
    See this package in npm: https://www.npmjs.com/package/@next/third-parties
  - @prisma/client from 5.13.0 to 5.18.0.
    See this package in npm: https://www.npmjs.com/package/@prisma/client
  - @t3-oss/env-nextjs from 0.10.1 to 0.11.0.
    See this package in npm: https://www.npmjs.com/package/@t3-oss/env-nextjs
  - @trpc/client from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/client
  - @trpc/next from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/next
  - @trpc/react-query from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/react-query
  - @trpc/server from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/server
  - @vercel/analytics from 1.2.2 to 1.3.1.
    See this package in npm: https://www.npmjs.com/package/@vercel/analytics
  - @vercel/speed-insights from 1.0.10 to 1.0.12.
    See this package in npm: https://www.npmjs.com/package/@vercel/speed-insights
  - cheerio from 1.0.0-rc.12 to 1.0.0.
    See this package in npm: https://www.npmjs.com/package/cheerio
  - next from 14.1.4 to 14.2.5.
    See this package in npm: https://www.npmjs.com/package/next
  - pdfjs-dist from 4.2.67 to 4.5.136.
    See this package in npm: https://www.npmjs.com/package/pdfjs-dist
  - react-resizable-panels from 2.0.19 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/react-resizable-panels
  - rehype-katex from 7.0.0 to 7.0.1.
    See this package in npm: https://www.npmjs.com/package/rehype-katex
  - sharp from 0.33.3 to 0.33.5.
    See this package in npm: https://www.npmjs.com/package/sharp
  - tiktoken from 1.0.15 to 1.0.16.
    See this package in npm: https://www.npmjs.com/package/tiktoken
  - zustand from 4.5.2 to 4.5.5.
    See this package in npm: https://www.npmjs.com/package/zustand

See this project in Snyk:
https://app.snyk.io/org/black-da-bull/project/55d649ac-1ea9-4b11-9cbf-0e92f04e2de9?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

vercel bot commented Sep 11, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
big-agi ❌ Failed (Inspect) Sep 11, 2024 11:18pm

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Copy link

squash-labs bot commented Sep 11, 2024

Manage this branch in Squash

Test this branch here: https://snyk-upgrade-37bf1ff712e376eda-sy7u5.squash.io

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants