Skip to content

fix(deps): update non-major#140

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major
Open

fix(deps): update non-major#140
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/non-major

Conversation

@renovate

@renovate renovate Bot commented Jun 12, 2023 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@portabletext/react ^2.0.0 → ^2.0.3 age confidence dependencies patch
@sanity/cli (source) ^4.8.1 → ^4.22.0 age confidence pnpm.catalog.default minor
@sanity/client (source) ^7.11.1 → ^7.23.0 age confidence pnpm.catalog.default minor
@sanity/client (source) ^6.12.3 → ^6.29.1 age confidence dependencies minor
@sanity/document-internationalization (source) ^1.1.1 → ^1.1.2 age confidence dependencies patch
@sanity/image-url (source) ^1.0.2 → ^1.2.0 age confidence dependencies minor
@sanity/preview-url-secret (source) ^1.6.1 → ^1.6.21 age confidence dependencies patch
@sanity/vercel-protection-bypass (source) ^2.0.2 → ^2.1.1 age confidence dependencies minor
@sanity/vision (source) ^4.8.1 → ^4.22.0 age confidence pnpm.catalog.default minor
@sanity/visual-editing (source) ^1.1.0 → ^1.8.22 age confidence dependencies minor
@segment/snippet ^4.15.3 → ^4.16.2 age confidence dependencies patch
@tailwindcss/forms ^0.5.3 → ^0.5.11 age confidence dependencies patch
@tailwindcss/forms ^0.5.3 → ^0.5.11 age confidence dependencies patch
@types/node (source) ^18.11.9 → ^18.19.130 age confidence devDependencies patch
@types/react (source) ^19.1.12 → ^19.2.17 age confidence pnpm.catalog.default minor
@types/react (source) ^18.0.25 → ^18.3.31 age confidence devDependencies minor
@types/react-dom (source) ^19.1.9 → ^19.2.3 age confidence pnpm.catalog.default minor
@types/styled-components (source) ^5.1.26 → ^5.1.36 age confidence devDependencies patch
@vercel/analytics (source) ^1.5.0 → ^1.6.1 age confidence dependencies minor
@vercel/related-projects (source) ^1.0.0 → ^1.1.0 age confidence dependencies minor
@vercel/speed-insights (source) ^1.2.0 → ^1.3.1 age confidence dependencies minor
@vercel/speed-insights (source) ^1.0.9 → ^1.3.1 age confidence dependencies minor
EndBug/add-and-commit (changelog) 61a88be → a94899b action digest
actions/cache (changelog) 9b0c1fc → 6f8efc2 action digest
autoprefixer ^10.4.13 → ^10.5.2 age confidence dependencies minor
autoprefixer ^10.4.13 → ^10.5.2 age confidence devDependencies minor
classnames ^2.3.2 → ^2.5.1 age confidence dependencies patch
cryptr ^6.0.3 → ^6.4.0 age confidence dependencies minor
date-fns ^2.29.3 → ^2.30.0 age confidence dependencies patch
dotenv ^16.0.3 → ^16.6.1 age confidence devDependencies minor
esbuild-plugin-replace (source) ^1.3.0 → ^1.4.0 age confidence devDependencies patch
esbuild-register ^3.4.1 → ^3.6.0 age confidence devDependencies minor
eslint (source) ^8.28.0 → ^8.57.1 age confidence devDependencies minor
eslint-config-next (source) ^13.0.5 → ^13.5.11 age confidence devDependencies patch
eslint-config-prettier ^8.5.0 → ^8.10.2 age confidence devDependencies patch
groqd (source) ^0.0.4 → ^0.15.13 age confidence dependencies minor
i18next (source) ^22.0.6 → ^22.5.1 age confidence dependencies patch
libphonenumber-js ^1.10.14 → ^1.13.7 age confidence dependencies minor
lodash.orderby (source) ^4.6.0 → ^4.18.0 age confidence dependencies minor
lucide-react (source) ^0.102.0 → ^0.577.0 age confidence dependencies minor
next-intl (source) ^2.9.1 → ^2.22.1 age confidence dependencies patch
next-sanity (source) ^11.1.0 → ^11.6.13 age confidence dependencies minor
polished (source) ^4.2.2 → ^4.3.1 age confidence dependencies patch
postcss (source) ^8.5.6 → ^8.5.15 age confidence dependencies patch
postcss (source) ^8.4.19 → ^8.5.15 age confidence devDependencies minor
prettier (source) ^2.8.0 → ^2.8.8 age confidence devDependencies patch
prettier-plugin-packagejson ^2.3.0 → ^2.5.22 age confidence devDependencies minor
prettier-plugin-tailwindcss ^0.2.0 → ^0.8.0 age confidence devDependencies minor
puppeteer (source) ^19.3.0 → ^19.11.1 age confidence devDependencies patch
puppeteer-core (source) ^19.3.0 → ^19.11.1 age confidence devDependencies patch
react (source) ^19.1.1 → ^19.2.7 age confidence pnpm.catalog.default minor
react (source) ^18.2.0 → ^18.3.1 age confidence dependencies minor
react-dom (source) ^19.1.1 → ^19.2.7 age confidence pnpm.catalog.default minor
react-dom (source) ^18.2.0 → ^18.3.1 age confidence dependencies minor
react-hot-toast ^2.4.0 → ^2.6.0 age confidence dependencies minor
react-i18next ^12.0.0 → ^12.3.1 age confidence dependencies patch
rxjs (source) ^7.8.1 → ^7.8.2 age confidence dependencies patch
sanity (source) ^4.8.1 → ^4.22.0 age confidence pnpm.catalog.default minor
sanity (source) 3.28.0 → 3.99.0 age confidence dependencies minor
sanity-plugin-internationalized-array (source) ^1.10.8 → ^1.10.9 age confidence dependencies patch
styled-components (source) ^6.1.19 → ^6.4.3 age confidence pnpm.catalog.default minor
styled-components (source) ^5.3.6 → ^5.3.11 age confidence dependencies patch
tailwindcss (source) ^3.2.4 → ^3.4.19 age confidence dependencies minor
tailwindcss (source) ^3.2.4 → ^3.4.19 age confidence devDependencies patch
type-fest ^3.2.0 → ^3.13.1 age confidence devDependencies patch
typescript (source) 5.9.2 → 5.9.3 age confidence pnpm.catalog.default patch
typescript (source) ^5.3.3 → ^5.9.3 age confidence devDependencies minor
write-file-atomic ^5.0.0 → ^5.0.1 age confidence devDependencies patch
zod (source) ^3.19.1 → ^3.25.76 age confidence dependencies minor

Release Notes

sanity-io/cli (@​sanity/cli)

v4.22.0

Features
Bug Fixes

v4.21.1

Bug Fixes

v4.21.0

Features
Bug Fixes

v4.20.3

Bug Fixes

v4.20.2

Note: Version bump only for package @​sanity/cli

v4.20.1

Bug Fixes

v4.20.0

Note: Version bump only for package @​sanity/cli

v4.19.0

Features

v4.18.0

Bug Fixes

v4.17.0

Bug Fixes

v4.16.0

Features
Bug Fixes

v4.15.0

Bug Fixes
Reverts

v4.14.2

Bug Fixes

v4.14.1

Note: Version bump only for package @​sanity/cli

v4.14.0

Bug Fixes

v4.13.0

Features
Bug Fixes

v4.12.0

Note: Version bump only for package @​sanity/cli

v4.11.0

Bug Fixes

v4.10.3

Bug Fixes

v4.10.2

Note: Version bump only for package @​sanity/cli

v4.10.1

Bug Fixes

v4.10.0

Bug Fixes

v4.9.0

Features
sanity-io/client (@​sanity/client)

v7.23.0

Compare Source

Features

v7.22.1

Compare Source

Bug Fixes
  • live: verify CORS via /check/cors (credentials-aware) before reporting CorsOriginError (#​1219) (566e1b5)

v7.22.0

Compare Source

Features

v7.21.0

Compare Source

Features
  • live: add waitFor option to defer events until Sanity Function processing (#​1209) (3251113)
  • support intercepting requests via internal requestHandler config (#​1208) (4d794f6)
Bug Fixes

v7.20.0

Compare Source

Features

v7.19.0

Compare Source

Features

v7.18.0

Compare Source

Features
  • types: add VideoRenditionInfo types with typed resolution (#​1186) (6d9e85e)
Bug Fixes

v7.17.0

Compare Source

Features
  • projects: add onlyExplicitMembership option to projects.list() (#​1200) (96619c5)

v7.16.0

Compare Source

Features
  • dataset: added embeddings configuration options (d4cca13)

v7.15.0

Compare Source

Features

v7.14.1

Compare Source

Bug Fixes

v7.14.0

Compare Source

Features
  • media-library: add thumbhash support to AssetMetadataType (223fdbc)
  • media-library: improve Media Library API support (#​1171) (df82583)
Bug Fixes
  • types: thumbhash -> thumbHash (223fdbc)

v7.13.2

Compare Source

Bug Fixes

v7.13.1

Compare Source

Bug Fixes

v7.13.0

Compare Source

Features

v7.12.1

Compare Source

Bug Fixes

v7.12.0

Compare Source

Features

v7.11.2

Compare Source

Bug Fixes
sanity-io/plugins (@​sanity/document-internationalization)

v1.1.2

Compare Source

sanity-io/image-url (@​sanity/image-url)

v1.2.0

[Compare Source](https://redirect.github.com/sanity-io/image-url/compar

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 3am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@socket-security

socket-security Bot commented Jun 12, 2023 •
edited
Loading

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/next@16.3.0-canary.69 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @esbuild/aix-ppc64 is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/sanity@3.99.0 → npm/@esbuild/aix-ppc64@0.25.6

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@esbuild/aix-ppc64@0.25.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm @pnpm/network.ca-file is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/@sanity/cli@4.22.0 → npm/@pnpm/network.ca-file@1.0.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@pnpm/network.ca-file@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm css-tree is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/css-tree@3.2.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/css-tree@3.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm data-urls is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/data-urls@7.0.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/data-urls@7.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm date-fns is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/date-fns@4.4.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/date-fns@4.4.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm jsdom is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/jsdom@28.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/jsdom@28.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm jsdom is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package-lock.json → npm/jsdom@28.1.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/jsdom@28.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm next is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/next@16.3.0-canary.69

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@16.3.0-canary.69. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm next is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/next@16.3.0-canary.69

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@16.3.0-canary.69. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm next is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/next@16.3.0-canary.69

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@16.3.0-canary.69. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot force-pushed the renovate/non-major branch 17 times, most recently from e9bae64 to 621955d Compare June 18, 2023 21:07
@renovate renovate Bot force-pushed the renovate/non-major branch 10 times, most recently from 00f445d to 7f9fb1e Compare June 21, 2023 21:45
@renovate renovate Bot force-pushed the renovate/non-major branch 11 times, most recently from 67bcc5c to 2958cd5 Compare July 5, 2023 16:58
@renovate renovate Bot force-pushed the renovate/non-major branch 16 times, most recently from 61d0fff to 8965eaa Compare July 14, 2023 15:15
@vercel

vercel Bot commented Feb 7, 2024 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
cv Error Error Jun 27, 2026 10:19pm
cv-studio Ready Ready Preview, Comment Jun 27, 2026 10:19pm
cv-web Error Error Jun 27, 2026 10:19pm

@socket-security

socket-security Bot commented Oct 16, 2025 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednext@​16.3.0-canary.6930100789970
Addedeslint@​8.57.19710010050100
Addednext-intl@​2.22.3100989250100
Addedpuppeteer@​19.11.19210010050100
Addedeslint-config-next@​13.5.11991006598100
Added@​vercel/​analytics@​1.6.199100839170
Addedeslint-config-prettier@​8.10.21001007287100
Added@​types/​styled-components@​5.1.361001007481100
Added@​types/​react-dom@​19.2.31001007585100
Added@​sanity/​vercel-protection-bypass@​2.1.17610082100100
Addedlodash.orderby@​4.18.01001007882100
Updated@​sanity/​cli@​3.28.0 ⏵ 4.22.097 +510079 +198100
Added@​types/​react@​19.2.171001007995100
Addedesbuild-plugin-replace@​1.4.0971009680100
Addedreact-hot-toast@​2.6.01001009281100
Addedcryptr@​6.4.01001008781100
Added@​types/​node@​18.19.1301001008196100
Addedclassnames@​2.5.110010010082100
Addedprettier-plugin-packagejson@​2.5.221001008285100
Updatedpostcss@​8.4.31 ⏵ 8.5.15100 +1100 +282 +188100
Added@​segment/​snippet@​4.16.2991009183100
Added@​vercel/​related-projects@​1.1.0891008487100
Updatedreact@​18.2.0 ⏵ 19.2.7100 +11008497100
Updatedreact@​18.2.0 ⏵ 18.3.1100 +110084 +197100
Addedgroqd@​0.15.13961008592100
Added@​vercel/​speed-insights@​1.3.1991008690100
Addedtailwindcss@​3.4.19981008798100
Added@​tailwindcss/​forms@​0.5.1110010010087100
Addedwrite-file-atomic@​5.0.11001009888100
Addedautoprefixer@​10.5.21001008892100
Addeddotenv@​16.6.110010010088100
Addedpuppeteer-core@​19.11.18910010097100
Addedtype-fest@​3.13.110010010090100
See 21 more rows in the dashboard

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

🤖 bot 📦 deps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants