Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 11, 2024

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package From To
next 13.5.1 14.1.1
zod 3.22.4 3.23.8
postcss 8.4.36 8.4.38
@grpc/grpc-js 1.8.17 1.8.22
ip 1.1.9 removed
react-native 0.73.4 0.74.2
storybook 7.6.16 8.1.6
protobufjs 7.2.4 7.3.0

Updates next from 13.5.1 to 14.1.1

Commits

Updates zod from 3.22.4 to 3.23.8

Release notes

Sourced from zod's releases.

v3.23.8

Commits:

  • 0f4d403558ae0490c711e4c2bfcf6c200bd14e11 Add Bronze logos (#3470)
  • 19687315b5b24bbd1ff6c346bfc2975700221748 Tweak tiers (#3471)
  • eda7df314399929f7ed737423868a5a0780cd944 Change RefinementCtx to interface
  • ca42965df46b2f7e2747db29c40a26bcb32a51d5 v3.23.8

v3.23.7

Commits:

  • 29d2ea2a15f0b1ac4b89138041f786a3dafc490b Add copper
  • d969423266fccee56ef769da6744cc8bacb04550 Fix #3437: extendShape erases JSDoc property documentation (#3463)
  • 2239ff3ccc9af4d28bee27bd6fb2a5632844480b Add social crow
  • f985b5b922cb357dbf4b25bb43814d19f838e046 3.23.7

v3.23.6

Commits:

  • bc0095aab9e7254deb18701adc63de128ca2c742 Test on latest node
  • 6e5699a30373cc22879f2bcb6902fc138518c980 Lint on latest node
  • 1f466d9d00f446d7bed1962990e7a1ce813ab0d4 describe how one can protect from cyclical objects starting an infini… (#3447)
  • 3fed6f21e0ea7adc91aa0cc44f75bcf4e526d98e Add zod playground link (#3454)
  • 04e1f379f6989d23dd45660fcabc78f76d7834f8 Fixed freezing async ZodReadonly results (#3457)
  • b87e59d0e4bbb4403bf27243afdcda9fcdeec258 Update sponsor tiers (#3453)
  • 143886151bba3930bdcc10d34a1cff4bf9103ba8 Add copper tier (#3460)
  • ce3711e1384952d255769b9495f9bfadfb327291 add VSCode dev container support and documenation
  • 93b480b12ec3466cbd3b4182f7ce292e5c61528c v3.23.6

v3.23.5

Commits:

  • 110b8211f991b3e060ab2da4fec7b63d600439ad Update README_ZH.md (#3433)
  • c1910bdfc98709b8f14231e2cefc5a3be401e3ee Made ZodEnum take readonly string array (#3444)
  • 541a862e978f96eb391849a6bf16be84231aa1b3 3.23.5

v3.23.4

Commits:

  • 157b18d742c86d85b26a8421af46ad6d6d6b6ea7 Add 3.23 announcement
  • aedf93f1435a29463d915c3be45b4dcbeefa8cc1 Revert change to default Input
  • 45107f7a7230fe48ee24dc37e621422c9dc64ec4 v3.23.4

v3.23.3

Commits:

  • 103d2436f85872ca0e0e6247652989cc93d46a39 3.23.3

v3.23.2

Commits:

... (truncated)

Commits

Updates postcss from 8.4.36 to 8.4.38

Release notes

Sourced from postcss's releases.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.
Changelog

Sourced from postcss's changelog.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.
Commits
  • a69d45e Release 8.4.38 version
  • 64e35d9 Update dependencies
  • c1ad8fb Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...
  • b45e7e9 fix endIndex
  • 1bea246 failing test: for endIndex 0 in rangeBy
  • 0fd1d86 Add changelog auto release on Github
  • 49c906e Release 8.4.37 version
  • b5bd92c Fix another broken prev source map issue
  • 2882039 Update dependencies
  • See full diff in compare view

Updates @grpc/grpc-js from 1.8.17 to 1.8.22

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.8.22

  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.

@​grpc/grpc-js@​1.8.21

  • Fix propagation of UNIMPLEMENTED error messages (#2528)

@​grpc/grpc-js 1.8.20

  • Fix a crash when the channel option grpc.keepalive_permit_without_calls is set (#2519)

@​grpc/grpc-js 1.8.19

  • Update keepalive behavior to more correctly handle short calls and long periods of inactivity (#2513)

@​grpc/grpc-js 1.8.18

  • Fix reporting of call stacks in unary request errors (#2503)
  • Fix reporting of proxy info in channelz socket responses (#2503)
Commits
  • a8a0203 Merge pull request from GHSA-7v5v-9h63-cj86
  • 3b110cd grpc-js: Bump to 1.8.22
  • 8e62222 grpc-js: Avoid buffering significantly more than max_receive_message_size per...
  • 9d83947 Merge pull request #2742 from sergiitk/backport-1.8-psm-interop-common-prod-t...
  • 00f348c Merge pull request #2729 from sergiitk/psm-interop-common-prod-tests
  • 36d105b Merge pull request #2737 from murgatroid99/backport-1.8-grpc-js_linkify-it_fix
  • 969e305 Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fix
  • d78216f Merge pull request #2715 from sergiitk/backport-1.8-psm-interop-pkg-dev
  • f38966a Merge pull request #2712 from sergiitk/psm-interop-pkg-dev
  • ffefff2 Merge pull request #2640 from XuanWang-Amos/backport-1.8-psm-interop-shared-b...
  • Additional commits viewable in compare view

Removes ip

Updates react-native from 0.73.4 to 0.74.2

Release notes

Sourced from react-native's releases.

0.74.2

Changed

Fixed

Android specific

iOS specific

  • Privacy Manifest aggregation failing due to no NSPrivacyAccessedAPITypes key (fc4e099920 by @​renchap)
  • In privacy manifest post install script, handle the case where the file reference doesn't have a path (4ad65ac59a by @​robertying)
  • Fixed an issue where the selectionColor prop was not being applied on the TextInput component. (2bde626a9f by @​robinshin)

Hermes dSYMS:


You can file issues or pick requests against this release here.


To help you upgrade to this version, you can use the Upgrade Helper ⚛️.


View the whole changelog in the CHANGELOG.md file.

0.74.1

Added

iOS Specific

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.74.2

Changed

Fixed

Android specific

iOS specific

  • Privacy Manifest aggregation failing due to no NSPrivacyAccessedAPITypes key (fc4e099920 by @​renchap)
  • In privacy manifest post install script, handle the case where the file reference doesn't have a path (4ad65ac59a by @​robertying)
  • Fixed an issue where the selectionColor prop was not being applied on the TextInput component. (2bde626a9f by @​robinshin)

0.74.1

Added

iOS Specific

Changed

Android specific

Fixed

... (truncated)

Commits

Updates storybook from 7.6.16 to 8.1.6

Release notes

Sourced from storybook's releases.

v8.1.6

8.1.6

  • CLI: Only log UpgradeStorybookToSameVersionError but continue upgrade as normal - #27217, thanks @​kasperpeulen!
  • Core: Replace ip function with a small helper function to address security concerns - #27529, thanks @​tony19!
  • Tags: Fix unsafe project-level tags lookup - #27511, thanks @​shilman!
  • Vite: Fix stats-plugin to normalize file names with posix paths - #27218, thanks @​AlexAtVista!

v8.1.5

8.1.5

v8.1.4

8.1.4

v8.1.3

8.1.3

v8.1.2

8.1.2

v8.1.1

8.1.1

v8.1.0

8.1.0

Storybook 8.1 is here with a ton of new features and bug fixes:

... (truncated)

Changelog

Sourced from storybook's changelog.

8.1.6

  • CLI: Only log the UpgradeStorybookToSameVersionError but continue the upgrade as normal - #27217, thanks @​kasperpeulen!
  • Core: Replace ip function with a small helper function to address security concerns - #27529, thanks @​tony19!
  • Tags: Fix unsafe project-level tags lookup - #27511, thanks @​shilman!
  • Vite: Fix stats-plugin to normalize file names with posix paths - #27218, thanks @​AlexAtVista!

8.1.5

8.1.4

8.1.3

8.1.2

8.1.1

8.1.0

Storybook 8.1 is here with a tone of new features and bug fixes:

  • 🏷️ Static tag-based filtering
  • 🦺 Type-safe, standards-based module mocking
  • 🐣 New beforeEach test hook
  • 🧳 Portable Stories API for Playwright Component Testing
  • 🐕‍🦺 Support the new signal-based input & output functions in Angular
  • 2️⃣ Two new ways to create stories: generating them from story controls or from your components directly!

... (truncated)

Commits
  • 27a643d Bump version from "8.1.5" to "8.1.6" [skip ci]
  • dba883d Merge pull request #27217 from storybookjs/kasper/disable-upgrade-to-same-ver...
  • 9b706ff Bump version from "8.1.4" to "8.1.5" [skip ci]
  • 226057b Merge pull request #27366 from mnigh/next
  • d972793 Bump version from "8.1.3" to "8.1.4" [skip ci]
  • a2b9d08 Bump version from "8.1.2" to "8.1.3" [skip ci]
  • 487b028 Bump version from "8.1.1" to "8.1.2" [skip ci]
  • bb059a9 Bump version from "8.1.0" to "8.1.1" [skip ci]
  • 684fb9c Bump version from "8.1.0-beta.1" to "8.1.0" [skip ci]
  • 89be63a format react-docgen automigration
  • Additional commits viewable in compare view

Updates ejs from 3.1.9 to 3.1.10

Release notes

Sourced from ejs's releases.

v3.1.10

Version 3.1.10

Commits

Updates protobufjs from 7.2.4 to 7.3.0

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.3.0

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

protobufjs: v7.2.6

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

protobufjs: v7.2.5

7.2.5 (2023-08-21)

Bug Fixes

Changelog

Sourced from protobufjs's changelog.

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

7.2.5 (2023-08-21)

Bug Fixes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [next](https://github.com/vercel/next.js) | `13.5.1` | `14.1.1` |
| [zod](https://github.com/colinhacks/zod) | `3.22.4` | `3.23.8` |
| [postcss](https://github.com/postcss/postcss) | `8.4.36` | `8.4.38` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.17` | `1.8.22` |
| [ip](https://github.com/indutny/node-ip) | `1.1.9` | `removed` |
| [react-native](https://github.com/facebook/react-native/tree/HEAD/packages/react-native) | `0.73.4` | `0.74.2` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `7.6.16` | `8.1.6` |
| [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.2.4` | `7.3.0` |



Updates `next` from 13.5.1 to 14.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v13.5.1...v14.1.1)

Updates `zod` from 3.22.4 to 3.23.8
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/main/CHANGELOG.md)
- [Commits](colinhacks/zod@v3.22.4...v3.23.8)

Updates `postcss` from 8.4.36 to 8.4.38
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.36...8.4.38)

Updates `@grpc/grpc-js` from 1.8.17 to 1.8.22
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Removes `ip`

Updates `react-native` from 0.73.4 to 0.74.2
- [Release notes](https://github.com/facebook/react-native/releases)
- [Changelog](https://github.com/facebook/react-native/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react-native/commits/v0.74.2/packages/react-native)

Updates `storybook` from 7.6.16 to 8.1.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.1.6/code/lib/cli)

Updates `ejs` from 3.1.9 to 3.1.10
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.9...v3.1.10)

Updates `protobufjs` from 7.2.4 to 7.3.0
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.4...protobufjs-v7.3.0)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: zod
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: react-native
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 11, 2024
Copy link

vercel bot commented Jun 11, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
dev-blog-tjoz ❌ Failed (Inspect) Jun 11, 2024 1:51am

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 18, 2024

Superseded by #44.

@dependabot dependabot bot closed this Jun 18, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-eff36e48b4 branch June 18, 2024 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants