Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: , , , , , , , , , , , , , , , cheerio, next, pdfjs-dist, react-resizable-panels, rehype-katex, sharp, tesseract.js, tiktoken, zustand #9

Open
wants to merge 1 commit into
base: main-stable
Choose a base branch
from
Open

[Snyk] Upgrade: , , , , , , , , , , , , , , , cheerio, next, pdfjs-dist, react-resizable-panels, rehype-katex, sharp, tesseract.js, tiktoken, zustand #9

wants to merge 1 commit into from

Conversation

black-da-bull
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@emotion/cache
from 11.11.0 to 11.13.1 | 3 versions ahead of your current version | 2 months ago
on 2024-07-25
@emotion/styled
from 11.11.5 to 11.13.0 | 2 versions ahead of your current version | 2 months ago
on 2024-07-20
@emotion/react
from 11.11.4 to 11.13.3 | 3 versions ahead of your current version | a month ago
on 2024-08-21
@mui/icons-material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@next/bundle-analyzer
from 14.2.3 to 14.2.7 | 4 versions ahead of your current version | 21 days ago
on 2024-08-27
@next/third-parties
from 14.2.3 to 14.2.7 | 4 versions ahead of your current version | 21 days ago
on 2024-08-27
@prisma/client
from 5.13.0 to 5.19.0 | 497 versions ahead of your current version | 21 days ago
on 2024-08-27
@t3-oss/env-nextjs
from 0.10.1 to 0.11.1 | 2 versions ahead of your current version | 23 days ago
on 2024-08-25
@trpc/client
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/next
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/react-query
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/server
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@vercel/analytics
from 1.2.2 to 1.3.1 | 2 versions ahead of your current version | 4 months ago
on 2024-05-24
@vercel/speed-insights
from 1.0.10 to 1.0.12 | 2 versions ahead of your current version | 3 months ago
on 2024-06-12
cheerio
from 1.0.0-rc.12 to 1.0.0 | 1 version ahead of your current version | a month ago
on 2024-08-09
next
from 14.1.4 to 14.2.7 | 84 versions ahead of your current version | 21 days ago
on 2024-08-27
pdfjs-dist
from 4.2.67 to 4.5.136 | 3 versions ahead of your current version | 2 months ago
on 2024-07-27
react-resizable-panels
from 2.0.19 to 2.1.1 | 6 versions ahead of your current version | a month ago
on 2024-08-21
rehype-katex
from 7.0.0 to 7.0.1 | 1 version ahead of your current version | a month ago
on 2024-08-19
sharp
from 0.33.3 to 0.33.5 | 5 versions ahead of your current version | a month ago
on 2024-08-16
tesseract.js
from 5.1.0 to 5.1.1 | 1 version ahead of your current version | 24 days ago
on 2024-08-24
tiktoken
from 1.0.15 to 1.0.16 | 1 version ahead of your current version | a month ago
on 2024-08-15
zustand
from 4.5.2 to 4.5.5 | 3 versions ahead of your current version | a month ago
on 2024-08-15

Release notes
Package name: @emotion/cache
  • 11.13.1 - 2024-07-25

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.0 - 2023-05-06
from @emotion/cache GitHub release notes
Package name: @emotion/styled
  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.5 - 2024-03-29
from @emotion/styled GitHub release notes
Package name: @emotion/react
  • 11.13.3 - 2024-08-21

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

  • 11.12.0 - 2024-07-19
  • 11.11.4 - 2024-02-27
from @emotion/react GitHub release notes
Package name: @mui/icons-material from @mui/icons-material GitHub release notes
Package name: @mui/material from @mui/material GitHub release notes
Package name: @next/bundle-analyzer
  • 14.2.7 - 2024-08-27

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Revert "chore: externalize undici for bundling" (#65727)
    • Refactor internal routing headers to use request meta (#66987)
    • fix(next): add cross origin in react dom preload (#67423)
    • build: upgrade edge-runtime (#67565)
    • GTM dataLayer parameter should take an object, not an array of strings (#66339)
    • fix: properly patch lockfile against swc bindings (#66515)
    • Add deployment id header for rsc payload if present (#67255)
    • Update font data (#68639)
    • fix i18n data pathname resolving (#68947)
    • pages router: ensure x-middleware-cache is respected (#67734)
    • Fix bad modRequest in flight entry manifest #68888
    • Reject next image urls in image optimizer #68628
    • Fix hmr assetPrefix escaping and reuse logic from other files #67983

    Credits

    Huge thanks to @ kjugi, @ huozhi, @ ztanner, @ SukkaW, @ marlier, @ Kikobeats, @ syi0808, @ ijjk, and @ samcx for helping!

  • 14.2.6 - 2024-08-21
  • 14.2.5 - 2024-07-10
  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/bundle-analyzer GitHub release notes
Package name: @next/third-parties
  • 14.2.7 - 2024-08-27

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Revert "chore: externalize undici for bundling" (#65727)
    • Refactor internal routing headers to use request meta (#66987)
    • fix(next): add cross origin in react dom preload (#67423)
    • build: upgrade edge-runtime (#67565)
    • GTM dataLayer parameter should take an object, not an array of strings (#66339)
    • fix: properly patch lockfile against swc bindings (#66515)
    • Add deployment id header for rsc payload if present (#67255)
    • Update font data (#68639)
    • fix i18n data pathname resolving (#68947)
    • pages router: ensure x-middleware-cache is respected (#67734)
    • Fix bad modRequest in flight entry manifest #68888
    • Reject next image urls in image optimizer #68628
    • Fix hmr assetPrefix escaping and reuse logic from other files #67983

    Credits

    Huge thanks to @ kjugi, @ huozhi, @ ztanner, @ SukkaW, @ marlier, @ Kikobeats, @ syi0808, @ ijjk, and @ samcx for helping!

  • 14.2.6 - 2024-08-21
  • 14.2.5 - 2024-07-10
  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/third-parties GitHub release notes
Package name: @prisma/client
  • 5.19.0 - 2024-08-27

    Today, we are excited to share the 5.19.0 stable release 🎉

    🌟 Help us spread the word about Prisma by starring the repo or posting on X about the release. 🌟

    Highlights

    Introducing TypedSQL

    TypedSQL is a brand new way to interact with your database from Prisma Client. After enabling the typedSql Preview feature, you’re able to write SQL queries in a new sql subdirectory of your prisma directory. These queries are then checked by Prisma during using the new --sql flag of prisma generate and added to your client for use in your code.

    To get started with TypedSQL:

    1. Make sure that you have the latest version of prisma and @ prisma/client installed:

      npm install -D prisma@latest
npm install @ prisma/client@latest

    2. Enable the typedSql Preview feature in your Prisma Schema.

         generator client {
     provider = "prisma-client-js"
     previewFeatures = ["typedSql"]
   }

    3. Create a sql subdirectory of your prisma directory.

      mkdir -p prisma/sql

    4. You can now add .sql files to the sql directory! Each file can contain one sql query and the name must be a valid JS identifier. For this example, say you had the file getUsersWithPosts.sql with the following contents:

      SELECT u.id, u.name, COUNT(p.id) as "postCount"
FROM "User" u
LEFT JOIN "Post" p ON u.id = p."authorId"
GROUP BY u.id, u.name

    5. Import your SQL query into your code with the @ prisma/client/sql import:

      import { PrismaClient } from '@ prisma/client'
      import { getUsersWithPosts } from '@prisma/client/sql'

      const prisma = new PrismaClient()

      const usersWithPostCounts = await prisma.$queryRawTyped(getUsersWithPosts)
      console.log(usersWithPostCounts)

    There’s a lot more to talk about with TypedSQL. We think that the combination of the high-level Prisma Client API and the low-level TypedSQL will make for a great developer experience for all of our users.

    To learn more about behind the “why” of TypedSQL be sure to check out our announcement blog post.

    For docs, check out our new TypedSQL section.

    Bug fixes

    Driver adapters and D1

    A few issues with our driverAdapters Preview feature and Cloudflare D1 support were resolved via prisma/prisma-engines#4970 and #24922

    • Mathematic operations such as max, min, eq, etc in queries when using Cloudflare D1.
    • Resolved issues when comparing BigInt IDs when relationMode="prisma" was enabled and Cloudflare D1 was being used.

    Joins

    • #23742 fixes Prisma Client not supporting deeply nested some clauses when the relationJoins Preview feature was enabled.

    MongoDB

    The MongoDB driver for Rust (that our query engine users under the hood) had behavior that prioritized IPv4 connections over IPv6 connections. In IPv6-only environments, this could lead to significant "cold starts" where the query engine had to wait for IPv4 to fail before the driver would try IPv6.

    With help from the MongoDB team, this has been resolved. The driver will now try IPv4 and IPv6 connections in parallel and then move forward with the first response. This should prevent cold start issues that have been seen with MongoDB in Prisma Accelerate.

    Thank you to the Mo...

@snyk-bot
fix: upgrade multiple dependencies with Snyk
ee855ac 
Snyk has created this PR to upgrade:
  - @emotion/cache from 11.11.0 to 11.13.1.
    See this package in npm: https://www.npmjs.com/package/@emotion/cache
  - @emotion/styled from 11.11.5 to 11.13.0.
    See this package in npm: https://www.npmjs.com/package/@emotion/styled
  - @emotion/react from 11.11.4 to 11.13.3.
    See this package in npm: https://www.npmjs.com/package/@emotion/react
  - @mui/icons-material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/icons-material
  - @mui/material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/material
  - @next/bundle-analyzer from 14.2.3 to 14.2.7.
    See this package in npm: https://www.npmjs.com/package/@next/bundle-analyzer
  - @next/third-parties from 14.2.3 to 14.2.7.
    See this package in npm: https://www.npmjs.com/package/@next/third-parties
  - @prisma/client from 5.13.0 to 5.19.0.
    See this package in npm: https://www.npmjs.com/package/@prisma/client
  - @t3-oss/env-nextjs from 0.10.1 to 0.11.1.
    See this package in npm: https://www.npmjs.com/package/@t3-oss/env-nextjs
  - @trpc/client from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/client
  - @trpc/next from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/next
  - @trpc/react-query from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/react-query
  - @trpc/server from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/server
  - @vercel/analytics from 1.2.2 to 1.3.1.
    See this package in npm: https://www.npmjs.com/package/@vercel/analytics
  - @vercel/speed-insights from 1.0.10 to 1.0.12.
    See this package in npm: https://www.npmjs.com/package/@vercel/speed-insights
  - cheerio from 1.0.0-rc.12 to 1.0.0.
    See this package in npm: https://www.npmjs.com/package/cheerio
  - next from 14.1.4 to 14.2.7.
    See this package in npm: https://www.npmjs.com/package/next
  - pdfjs-dist from 4.2.67 to 4.5.136.
    See this package in npm: https://www.npmjs.com/package/pdfjs-dist
  - react-resizable-panels from 2.0.19 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/react-resizable-panels
  - rehype-katex from 7.0.0 to 7.0.1.
    See this package in npm: https://www.npmjs.com/package/rehype-katex
  - sharp from 0.33.3 to 0.33.5.
    See this package in npm: https://www.npmjs.com/package/sharp
  - tesseract.js from 5.1.0 to 5.1.1.
    See this package in npm: https://www.npmjs.com/package/tesseract.js
  - tiktoken from 1.0.15 to 1.0.16.
    See this package in npm: https://www.npmjs.com/package/tiktoken
  - zustand from 4.5.2 to 4.5.5.
    See this package in npm: https://www.npmjs.com/package/zustand

See this project in Snyk:
https://app.snyk.io/org/black-da-bull/project/55d649ac-1ea9-4b11-9cbf-0e92f04e2de9?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel Vercel
Copy link

vercel bot commented Sep 17, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
big-agi ❌ Failed (Inspect) Sep 17, 2024 5:24pm

sourcery-ai[bot]
sourcery-ai bot reviewed Sep 17, 2024
View reviewed changes
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

@squash-labs Squash Labs
Copy link

squash-labs bot commented Sep 17, 2024

Manage this branch in Squash

Test this branch here: https://snyk-upgrade-ab87e0761a7655d57-68cq2.squash.io

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sourcery-ai Sourcery AI sourcery-ai left review comments

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@black-da-bull @snyk-bot