Bump the npm_and_yarn group across 1 directory with 4 updates #9
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 2 updates in the / directory: [next](https://github.com/vercel/next.js) and [remark-html](https://github.com/remarkjs/remark-html). Updates `next` from 10.1.3 to 14.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v10.1.3...v14.2.10) Updates `remark-html` from 13.0.1 to 13.0.2 - [Release notes](https://github.com/remarkjs/remark-html/releases) - [Commits](remarkjs/remark-html@13.0.1...13.0.2) Updates `nanoid` from 3.1.22 to 3.3.7 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@3.1.22...3.3.7) Updates `postcss` from 7.0.35 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.35...8.4.31) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: remark-html dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: nanoid dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
|
@dependabot rebase
…On Monday, October 14th, 2024 at 22:42, dependabot[bot] ***@***.***> wrote:
Bumps the npm_and_yarn group with 2 updates in the / directory: [next](https://github.com/vercel/next.js) and [remark-html](https://github.com/remarkjs/remark-html).
Updates next from 10.1.3 to 14.2.10
Release notes
Sourced from [next's releases](https://github.com/vercel/next.js/releases).
> v14.2.10
>
>> [!NOTE]
>> This release is backporting bug fixes. It does not include all pending features/changes on canary.
>
> Core Changes
>
> - Remove invalid fallback revalidate value ([vercel/next.js#69990](https://github.com/vercel/next.js/pull/69990))
> - Revert server action optimization ([vercel/next.js#69925](https://github.com/vercel/next.js/pull/69925))
> - Add ability to customize Cache-Control ([#69802](https://github.com/vercel/next.js/issues/69802))
>
> Credits
>
> Huge thanks to [@huozhi](https://github.com/huozhi) and [@ijjk](https://github.com/ijjk) for helping!
>
> v14.2.9
>
>> [!NOTE]
>> This release is backporting bug fixes. It does not include all pending features/changes on canary.
>
> Core Changes
>
> - Revert "Fix esm property def in flight loader ([#66990](https://github.com/vercel/next.js/issues/66990))" ([#69749](https://github.com/vercel/next.js/issues/69749))
> - Disable experimental.optimizeServer by default to fix failed server action ([#69788](https://github.com/vercel/next.js/issues/69788))
> - Fix middleware fallback: false case ([#69799](https://github.com/vercel/next.js/issues/69799))
> - Fix status code for /_not-found route ([#64058](https://github.com/vercel/next.js/issues/64058)) ([#69808](https://github.com/vercel/next.js/issues/69808))
> - Fix metadata prop merging ([#69807](https://github.com/vercel/next.js/issues/69807))
> - create-next-app: fix font file corruption when using import alias ([#69806](https://github.com/vercel/next.js/issues/69806))
>
> Credits
>
> Huge thanks to [@huozhi](https://github.com/huozhi), [@ztanner](https://github.com/ztanner), [@ijjk](https://github.com/ijjk), and [@lubieowoce](https://github.com/lubieowoce) for helping!
>
> v14.2.8
>
> What's Changed
>
>> [!NOTE]
>> This release is backporting bug fixes and minor improvements. It does not include all pending features/changes on canary.
>
> Support esmExternals in app directory
>
> - Support esm externals in app router ([#65041](https://github.com/vercel/next.js/issues/65041))
> - Turbopack: Allow client components from foreign code in app routes ([#64751](https://github.com/vercel/next.js/issues/64751))
> - Turbopack: add support for esm externals in app dir ([#64918](https://github.com/vercel/next.js/issues/64918))
> - other related PRs: [#66990](https://github.com/vercel/next.js/issues/66990) [#66727](https://github.com/vercel/next.js/issues/66727) [#66286](https://github.com/vercel/next.js/issues/66286) [#65519](https://github.com/vercel/next.js/issues/65519)
>
> Reading cookies set in middleware in components and actions
>
> - initialize ALS with cookies in middleware ([#65008](https://github.com/vercel/next.js/issues/65008))
> - fix middleware cookie initialization ([#65820](https://github.com/vercel/next.js/issues/65820))
> - ensure cookies set in middleware can be read in a server action ([#67924](https://github.com/vercel/next.js/issues/67924))
> - fix: merged middleware cookies should preserve options ([#67956](https://github.com/vercel/next.js/issues/67956))
... (truncated)
Commits
- [937651f](vercel/next.js@937651f) v14.2.10
- [7ed7f12](vercel/next.js@7ed7f12) Remove invalid fallback revalidate value ([#69990](https://github.com/vercel/next.js/issues/69990))
- [99de057](vercel/next.js@99de057) Revert server action optimization ([#69925](https://github.com/vercel/next.js/issues/69925))
- [24647b9](vercel/next.js@24647b9) Add ability to customize Cache-Control ([#69802](https://github.com/vercel/next.js/issues/69802))
- [6fa8982](vercel/next.js@6fa8982) v14.2.9
- [7998745](vercel/next.js@7998745) test: lock ts type check ([#69889](https://github.com/vercel/next.js/issues/69889))
- [4bd3849](vercel/next.js@4bd3849) create-next-app: fix font file corruption when using import alias ([#69806](https://github.com/vercel/next.js/issues/69806))
- [3756801](vercel/next.js@3756801) test: check most possible combination of CNA flags
- [9a72ad6](vercel/next.js@9a72ad6) unpin CNA tests from 14.2.3
- [747d365](vercel/next.js@747d365) Fix metadata prop merging ([#69807](https://github.com/vercel/next.js/issues/69807))
- Additional commits viewable in [compare view](vercel/next.js@v10.1.3...v14.2.10)
Maintainer changes
This version was pushed to npm by [vercel-release-bot](https://www.npmjs.com/~vercel-release-bot), a new releaser for next since your current version.
Updates remark-html from 13.0.1 to 13.0.2
Release notes
Sourced from [remark-html's releases](https://github.com/remarkjs/remark-html/releases).
> 13.0.2
>
> -
>
> b0b1ba5 Fix to sanitize by default The docs have always said remark-html is safe by default. It wasn’t and this patches that.
>
> If you do want to be unsafe, use remark-html with sanitize: false:
>
> -
>
> .use(remarkHtml)
>
> +
>
> .use(remarkHtml, {sanitize: false})
>
> Full Changelog: ***@***.***(remarkjs/remark-html@13.0.1...13.0.2)
Commits
- [2133d20](remarkjs/remark-html@2133d20) 13.0.2
- [b0b1ba5](remarkjs/remark-html@b0b1ba5) Fix to sanitize by default
- See full diff in [compare view](remarkjs/remark-html@13.0.1...13.0.2)
Updates nanoid from 3.1.22 to 3.3.7
Changelog
Sourced from [nanoid's changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md).
> 3.3.7
>
> - Fixed node16 TypeScript support (by Saadi Myftija).
>
> 3.3.6
>
> - Fixed package.
>
> 3.3.5
>
> - Backport funding information.
>
> 3.3.4
>
> - Fixed --help in CLI (by [@Lete114](https://github.com/Lete114)).
>
> 3.3.3
>
> - Reduced size (by Anton Khlynovskiy).
>
> 3.3.2
>
> - Fixed enhanced-resolve support.
>
> 3.3.1
>
> - Reduced package size.
>
> 3.3
>
> - Added size argument to function from customAlphabet (by Stefan Sundin).
>
> 3.2
>
> - Added --size and --alphabet arguments to binary (by Vitaly Baev).
>
> 3.1.32
>
> - Reduced async exports size (by Artyom Arutyunyan).
> - Moved from Jest to uvu (by Vitaly Baev).
>
> 3.1.31
>
> - Fixed collision vulnerability on object in size (by Artyom Arutyunyan).
>
> 3.1.30
>
> - Reduced size for project with brotli compression (by Anton Khlynovskiy).
>
> 3.1.29
>
> - Reduced npm package size.
>
> 3.1.28
>
> - Reduced npm package size.
>
> 3.1.27
>
> - Cleaned dependencies from development tools.
>
> 3.1.26
>
> - Improved performance (by Eitan Har-Shoshanim).
> - Reduced npm package size.
... (truncated)
Commits
- [89d82d2](ai/nanoid@89d82d2) Release 3.3.7 version
- [5022c35](ai/nanoid@5022c35) Update dual-publish
- [3e7a8e5](ai/nanoid@3e7a8e5) Remove benchmark from CI for v3
- [d356144](ai/nanoid@d356144) Fix CI for v3
- [37b25df](ai/nanoid@37b25df) Move to pnpm 8
- [d96f392](ai/nanoid@d96f392) Release 3.3.6 version
- [8210dfb](ai/nanoid@8210dfb) Release 3.3.5 version
- [f083d01](ai/nanoid@f083d01) Backport funding option
- [9a967ea](ai/nanoid@9a967ea) Update dependencies
- [21728dc](ai/nanoid@21728dc) Update IE polyfill to fix last improve with reduce ([#362](https://github.com/ai/nanoid/issues/362))
- Additional commits viewable in [compare view](ai/nanoid@3.1.22...3.3.7)
Updates postcss from 7.0.35 to 8.4.31
Release notes
Sourced from [postcss's releases](https://github.com/postcss/postcss/releases).
> 8.4.31
>
> - Fixed \r parsing to fix [CVE-2023-44270](https://github.com/advisories/GHSA-7fh5-64p2-3v2j).
>
> 8.4.30
>
> - Improved source map performance (by [@romainmenke](https://github.com/romainmenke)).
>
> 8.4.29
>
> - Fixed Node#source.offset (by [@idoros](https://github.com/idoros)).
> - Fixed docs (by [@coliff](https://github.com/coliff)).
>
> 8.4.28
>
> - Fixed Root.source.end for better source map (by [@romainmenke](https://github.com/romainmenke)).
> - Fixed Result.root types when process() has no parser.
>
> 8.4.27
>
> - Fixed Container clone methods types.
>
> 8.4.26
>
> - Fixed clone methods types.
>
> 8.4.25
>
> - Improve stringify performance (by [@romainmenke](https://github.com/romainmenke)).
> - Fixed docs (by [@vikaskaliramna07](https://github.com/vikaskaliramna07)).
>
> 8.4.24
>
> - Fixed Plugin types.
>
> 8.4.23
>
> - Fixed warnings in TypeDoc.
>
> 8.4.22
>
> - Fixed TypeScript support with node16 (by [@remcohaszing](https://github.com/remcohaszing)).
>
> 8.4.21
>
> - Fixed Input#error types (by [@hudochenkov](https://github.com/hudochenkov)).
>
> 8.4.20
>
> - Fixed source map generation for childless at-rules like @layer.
>
> 8.4.19
>
> - Fixed whitespace preserving after AST transformations (by [@romainmenke](https://github.com/romainmenke)).
>
> 8.4.18
>
> - Fixed an error on absolute: true with empty sourceContent (by [@KingSora](https://github.com/KingSora)).
>
> 8.4.17
>
> - Fixed Node.before() unexpected behavior (by [@romainmenke](https://github.com/romainmenke)).
> - Added TOC to docs (by [@muddv](https://github.com/muddv)).
>
> 8.4.16
... (truncated)
Changelog
Sourced from [postcss's changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md).
> 8.4.31
>
> - Fixed \r parsing to fix [CVE-2023-44270](https://github.com/advisories/GHSA-7fh5-64p2-3v2j).
>
> 8.4.30
>
> - Improved source map performance (by Romain Menke).
>
> 8.4.29
>
> - Fixed Node#source.offset (by Ido Rosenthal).
> - Fixed docs (by Christian Oliff).
>
> 8.4.28
>
> - Fixed Root.source.end for better source map (by Romain Menke).
> - Fixed Result.root types when process() has no parser.
>
> 8.4.27
>
> - Fixed Container clone methods types.
>
> 8.4.26
>
> - Fixed clone methods types.
>
> 8.4.25
>
> - Improve stringify performance (by Romain Menke).
> - Fixed docs (by [@vikaskaliramna07](https://github.com/vikaskaliramna07)).
>
> 8.4.24
>
> - Fixed Plugin types.
>
> 8.4.23
>
> - Fixed warnings in TypeDoc.
>
> 8.4.22
>
> - Fixed TypeScript support with node16 (by Remco Haszing).
>
> 8.4.21
>
> - Fixed Input#error types (by Aleks Hudochenkov).
>
> 8.4.20
>
> - Fixed source map generation for childless at-rules like @layer.
>
> 8.4.19
>
> - Fixed whitespace preserving after AST transformations (by Romain Menke).
>
> 8.4.18
>
> - Fixed an error on absolute: true with empty sourceContent (by Rene Haas).
>
> 8.4.17
>
> - Fixed Node.before() unexpected behavior (by Romain Menke).
> - Added TOC to docs (by Mikhail Dedov).
>
> 8.4.16
... (truncated)
Commits
- [90208de](postcss/postcss@90208de) Release 8.4.31 version
- [58cc860](postcss/postcss@58cc860) Fix carrier return parsing
- [4fff8e4](postcss/postcss@4fff8e4) Improve pnpm test output
- [cd43ed1](postcss/postcss@cd43ed1) Update dependencies
- [caa916b](postcss/postcss@caa916b) Update dependencies
- [8972f76](postcss/postcss@8972f76) Typo
- [11a5286](postcss/postcss@11a5286) Typo
- [45c5501](postcss/postcss@45c5501) Release 8.4.30 version
- [bc3c341](postcss/postcss@bc3c341) Update linter
- [b2be58a](postcss/postcss@b2be58a) Merge pull request [#1881](https://github.com/postcss/postcss/issues/1881) from romainmenke/improve-sourcemap-performance--phil...
- Additional commits viewable in [compare view](postcss/postcss@7.0.35...8.4.31)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
---------------------------------------------------------------
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
- @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
- @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/reposman33/nextjs-blog/network/alerts).
---------------------------------------------------------------
You can view, comment on, or merge this pull request online at:
#9
Commit Summary
- [a42d1e4](a42d1e4) Bump the npm_and_yarn group across 1 directory with 4 updates
File Changes
([2 files](https://github.com/reposman33/nextjs-blog/pull/9/files))
- M [package.json](https://github.com/reposman33/nextjs-blog/pull/9/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519) (4)
- M [yarn.lock](https://github.com/reposman33/nextjs-blog/pull/9/files#diff-51e4f558fae534656963876761c95b83b6ef5da5103c4adef6768219ed76c2de) (1977)
Patch Links:
- https://github.com/reposman33/nextjs-blog/pull/9.patch
- https://github.com/reposman33/nextjs-blog/pull/9.diff
—
Reply to this email directly, [view it on GitHub](#9), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AAYNOZW6ZA4JR5PL55VKAYTZ3QUCDAVCNFSM6AAAAABP5XG7T2VHI2DSMVQWIX3LMV43ASLTON2WKOZSGU4DOMBSGMYDMNI).
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
|
Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the / directory: next and remark-html.
Updates
nextfrom 10.1.3 to 14.2.10Release notes
Sourced from next's releases.
... (truncated)
Commits
937651fv14.2.107ed7f12Remove invalid fallback revalidate value (#69990)99de057Revert server action optimization (#69925)24647b9Add ability to customize Cache-Control (#69802)6fa8982v14.2.97998745test: lock ts type check (#69889)4bd3849create-next-app: fix font file corruption when using import alias (#69806)3756801test: check most possible combination of CNA flags9a72ad6unpin CNA tests from 14.2.3747d365Fix metadata prop merging (#69807)Maintainer changes
This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.
Updates
remark-htmlfrom 13.0.1 to 13.0.2Release notes
Sourced from remark-html's releases.
Commits
2133d2013.0.2b0b1ba5Fix to sanitize by defaultUpdates
nanoidfrom 3.1.22 to 3.3.7Changelog
Sourced from nanoid's changelog.
... (truncated)
Commits
89d82d2Release 3.3.7 version5022c35Update dual-publish3e7a8e5Remove benchmark from CI for v3d356144Fix CI for v337b25dfMove to pnpm 8d96f392Release 3.3.6 version8210dfbRelease 3.3.5 versionf083d01Backport funding option9a967eaUpdate dependencies21728dcUpdate IE polyfill to fix last improve with reduce (#362)Updates
postcssfrom 7.0.35 to 8.4.31Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
90208deRelease 8.4.31 version58cc860Fix carrier return parsing4fff8e4Improve pnpm test outputcd43ed1Update dependenciescaa916bUpdate dependencies8972f76Typo11a5286Typo45c5501Release 8.4.30 versionbc3c341Update linterb2be58aMerge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.