Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 16, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@shopify/prettier-plugin-liquid (source) 1.6.2 -> 1.6.3 age adoption passing confidence devDependencies patch
@types/node (source) 22.10.1 -> 22.10.2 age adoption passing confidence devDependencies patch
github/codeql-action v3.27.6 -> v3.27.9 age adoption passing confidence action patch
markdownlint-cli2 0.15.0 -> 0.16.0 age adoption passing confidence devDependencies minor
returntocorp/semgrep a265d09 -> ae27024 container digest
stylelint (source) 16.11.0 -> 16.12.0 age adoption passing confidence devDependencies minor
zod (source) 3.23.8 -> 3.24.1 age adoption passing confidence devDependencies minor

Release Notes

shopify/theme-tools (@​shopify/prettier-plugin-liquid)

v1.6.3

Compare Source

Patch Changes
github/codeql-action (github/codeql-action)

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

DavidAnson/markdownlint-cli2 (markdownlint-cli2)

v0.16.0

Compare Source

  • Try not to use require for modules (due to Node 22.12)
  • Update dependencies (EXcluding markdownlint)
stylelint/stylelint (stylelint)

v16.12.0

Compare Source

  • Added: selector-pseudo-class-allowed-list now checks @page pseudo-classes (#​8176) (@​Mouvedia).
  • Added: selector-pseudo-class-disallowed-list now checks @page pseudo-classes (#​8171) (@​Mouvedia).
  • Fixed: at-rule-property-required-list message to use "descriptor" for accuracy (#​8186) (@​ybiquitous).
  • Fixed: custom-property-no-missing-var-function false positives for container-name (#​8157) (@​Mouvedia).
  • Fixed: custom-property-no-missing-var-function false positives for custom properties passed to running() (#​8172) (@​Mouvedia).
  • Fixed: function-no-unknown false positives for running() (#​8172) (@​Mouvedia).
  • Fixed: selector-pseudo-class-no-unknown false positives for :open (#​8184) (@​lukewarlow).
  • Fixed: selector-pseudo-class-no-unknown false positives for :recto, :verso and :nth() (#​8170) (@​Mouvedia).
  • Fixed: selector-pseudo-class-no-unknown false positives for some moz-* vendor-prefixed pseudo-classes (#​8188) (@​Mouvedia).
  • Fixed: selector-pseudo-element-no-unknown false positives for ::details-content (#​8174) (@​lukewarlow).
  • Fixed: selector-type-no-unknown false positives for idents in functional pseudo-classes (#​8191) (@​elskhn).
  • Fixed: value-keyword-case false negatives (#​8158) (@​Mouvedia).
  • Fixed: value-keyword-case false positives for vendor-prefixed system colors (#​8146) (@​Mouvedia).
colinhacks/zod (zod)

v3.24.1

Compare Source

Commits:

v3.24.0

Compare Source

Implement @standard-schema/spec

This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

z.string().jwt()

Thanks to @​Mokshit06 and @​Cognition-Labs for this contribution!

To verify that a string is a valid 3-part JWT.

z.string().jwt();

⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

To constrain the JWT to a specific algorithm:

z.string().jwt({ alg: "RS256" });

z.string().base64url()

Thank you to @​marvinruder!

To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

z.string().base64url()

This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

z.string().cidr()

Thanks to @​wataryooou for their work on this!

A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

z.string().cidr()

To specify an IP version:

z.string().cidr({ version: "v4" })
z.string().cidr({ version: "v6" })

View the full diff from 3.23.8: colinhacks/zod@v3.23.8...v3.24.0


Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@netlify
Copy link

netlify bot commented Dec 16, 2024

Deploy Preview for gh-pages-openinf ready!

Name Link
🔨 Latest commit 4197687
🔍 Latest deploy log https://app.netlify.com/sites/gh-pages-openinf/deploys/675f72e8d0741600084305be
😎 Deploy Preview https://deploy-preview-1528--gh-pages-openinf.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@shopify/[email protected] None +6 2.66 MB shopify-dep
npm/@types/[email protected] None 0 2.28 MB types
npm/[email protected] Transitive: environment, filesystem +9 2.46 MB davidanson
npm/[email protected] None +2 45.3 kB wooorm
npm/[email protected] None +2 48 kB wooorm
npm/[email protected] None +2 45.2 kB wooorm
npm/[email protected] Transitive: environment +52 1.58 MB wooorm
npm/[email protected] Transitive: environment +42 1.42 MB wooorm
npm/[email protected] None +21 470 kB wooorm
npm/[email protected] Transitive: environment +91 2.26 MB wooorm
npm/[email protected] Transitive: environment +60 1.67 MB wooorm
npm/[email protected] None 0 13.5 kB i1stg
npm/[email protected] None +6 176 kB wooorm
npm/[email protected] None +19 1.31 MB wooorm
npm/[email protected] Transitive: environment +38 1.37 MB wooorm
npm/[email protected] None +5 131 kB wooorm
npm/[email protected] None +9 276 kB wooorm
npm/[email protected] None +6 83.2 kB wooorm
npm/[email protected] None +9 203 kB wooorm
npm/[email protected] None +10 151 kB wooorm
npm/[email protected] None +3 41.6 kB wooorm
npm/[email protected] None +3 41.5 kB wooorm
npm/[email protected] None +7 106 kB wooorm
npm/[email protected] None +7 121 kB wooorm
npm/[email protected] None +3 42.6 kB wooorm
npm/[email protected] None +4 51 kB wooorm

🚮 Removed packages: npm/@shopify/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

@renovate renovate bot merged commit a10860e into live Dec 16, 2024
13 checks passed
@renovate renovate bot deleted the renovate/all branch December 16, 2024 04:13
DerekNonGeneric pushed a commit to DerekNonGeneric/open.inf.is that referenced this pull request Dec 18, 2024
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant