Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 18, 2024

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package From To
next 13.5.1 14.1.1
zod 3.22.4 3.23.8
postcss 8.4.36 8.4.38
@grpc/grpc-js 1.8.17 1.10.9
ws 6.2.2 6.2.3
ip 1.1.9 removed
react-native 0.73.4 0.74.2
storybook 7.6.16 8.1.10

Updates next from 13.5.1 to 14.1.1

Commits

Updates zod from 3.22.4 to 3.23.8

Release notes

Sourced from zod's releases.

v3.23.8

Commits:

  • 0f4d403558ae0490c711e4c2bfcf6c200bd14e11 Add Bronze logos (#3470)
  • 19687315b5b24bbd1ff6c346bfc2975700221748 Tweak tiers (#3471)
  • eda7df314399929f7ed737423868a5a0780cd944 Change RefinementCtx to interface
  • ca42965df46b2f7e2747db29c40a26bcb32a51d5 v3.23.8

v3.23.7

Commits:

  • 29d2ea2a15f0b1ac4b89138041f786a3dafc490b Add copper
  • d969423266fccee56ef769da6744cc8bacb04550 Fix #3437: extendShape erases JSDoc property documentation (#3463)
  • 2239ff3ccc9af4d28bee27bd6fb2a5632844480b Add social crow
  • f985b5b922cb357dbf4b25bb43814d19f838e046 3.23.7

v3.23.6

Commits:

  • bc0095aab9e7254deb18701adc63de128ca2c742 Test on latest node
  • 6e5699a30373cc22879f2bcb6902fc138518c980 Lint on latest node
  • 1f466d9d00f446d7bed1962990e7a1ce813ab0d4 describe how one can protect from cyclical objects starting an infini… (#3447)
  • 3fed6f21e0ea7adc91aa0cc44f75bcf4e526d98e Add zod playground link (#3454)
  • 04e1f379f6989d23dd45660fcabc78f76d7834f8 Fixed freezing async ZodReadonly results (#3457)
  • b87e59d0e4bbb4403bf27243afdcda9fcdeec258 Update sponsor tiers (#3453)
  • 143886151bba3930bdcc10d34a1cff4bf9103ba8 Add copper tier (#3460)
  • ce3711e1384952d255769b9495f9bfadfb327291 add VSCode dev container support and documenation
  • 93b480b12ec3466cbd3b4182f7ce292e5c61528c v3.23.6

v3.23.5

Commits:

  • 110b8211f991b3e060ab2da4fec7b63d600439ad Update README_ZH.md (#3433)
  • c1910bdfc98709b8f14231e2cefc5a3be401e3ee Made ZodEnum take readonly string array (#3444)
  • 541a862e978f96eb391849a6bf16be84231aa1b3 3.23.5

v3.23.4

Commits:

  • 157b18d742c86d85b26a8421af46ad6d6d6b6ea7 Add 3.23 announcement
  • aedf93f1435a29463d915c3be45b4dcbeefa8cc1 Revert change to default Input
  • 45107f7a7230fe48ee24dc37e621422c9dc64ec4 v3.23.4

v3.23.3

Commits:

  • 103d2436f85872ca0e0e6247652989cc93d46a39 3.23.3

v3.23.2

Commits:

... (truncated)

Commits

Updates postcss from 8.4.36 to 8.4.38

Release notes

Sourced from postcss's releases.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.
Changelog

Sourced from postcss's changelog.

8.4.38

8.4.37

  • Fixed original.column are not numbers error in another case.
Commits
  • a69d45e Release 8.4.38 version
  • 64e35d9 Update dependencies
  • c1ad8fb Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...
  • b45e7e9 fix endIndex
  • 1bea246 failing test: for endIndex 0 in rangeBy
  • 0fd1d86 Add changelog auto release on Github
  • 49c906e Release 8.4.37 version
  • b5bd92c Fix another broken prev source map issue
  • 2882039 Update dependencies
  • See full diff in compare view

Updates @grpc/grpc-js from 1.8.17 to 1.10.9

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.10.9

  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.

@​grpc/grpc-js 1.10.8

  • Fix a bug that caused channels with unix: targets to not reconnect after the channel goes idle (#2750)

@​grpc/grpc-js 1.10.7

  • Improve reporting of HTTP error codes (#2723)
  • Update dependency on @grpc/proto-loader to the latest version (#2732)

@​grpc/grpc-js 1.10.6

  • Fix a bug that could cause a server to sometimes send the status early (#2708)

@​grpc/grpc-js 1.10.5

  • Resolve exception when Error.stackTraceLimit is undefined (#2701 contributed by @​davidfiala)
  • Call configured checkServerIdentity when grpc.ssl_target_name_override is set (#2704)
  • Add more information to DEADLINE_EXCEEDED error details strings (#2692)

@​grpc/grpc-js 1.10.4

  • Fix a bug that caused server interceptors to crash when using partially-populated ResponderBuilder and ListenerBuilder objects (#2696)
  • Avoid sending RST_STREAM from the client when the server has already finished its side of the stream (#2695)

@​grpc/grpc-js 1.10.3

  • Revert client reconnection changes in #2680 (#2691)

@​grpc/grpc-js 1.10.2

  • Implement server connection idle timeouts and improve channelz performance (#2677 contributed by @​AVVS)
  • Fix a bug that caused clients to automatically reconnect even when there were no active requests (#2680)
  • Modify order of server call events to more closely match pre-1.10.x behavior (#2683)

@​grpc/grpc-js 1.10.1

  • Fix a bug causing channels using the round_robin LB policy to fail to reconnect after a connection drops (#2667)

@​grpc/grpc-js-xds 1.10.1

  • Update dependency on @grpc/proto-loader to the latest version (#2732)

@​grpc/grpc-js-xds 1.10.0

@​grpc/grpc-js 1.10.0

Changelog

... (truncated)

Commits
  • 674f4e3 Merge pull request from GHSA-7v5v-9h63-cj86
  • 7ecaa2d grpc-js: Bump to 1.10.9
  • e64d816 grpc-js: Avoid buffering significantly more than max_receive_message_size per...
  • 45e5fe5 Merge pull request #2750 from murgatroid99/grpc-js_idle_uds_fix
  • 87a3541 grpc-js: Fix UDS channels not reconnecting after going idle
  • 3105791 Merge pull request #2740 from sergiitk/backport-1.10-psm-interop-common-prod-...
  • fec135a Merge pull request #2729 from sergiitk/psm-interop-common-prod-tests
  • 76fe802 Merge pull request #2739 from murgatroid99/backport-1.10-grpc-js_linkify-it_fix
  • d5edf49 Merge pull request #2735 from murgatroid99/grpc-js_linkify-it_fix
  • 23c05fc Merge pull request #2732 from murgatroid99/grpc-js_proto-loader_update
  • Additional commits viewable in compare view

Updates ws from 6.2.2 to 6.2.3

Release notes

Sourced from ws's releases.

6.2.3

Bug fixes

  • Backported e55e5106 to the 6.x release line (eeb76d31).
Commits

Removes ip

Updates react-native from 0.73.4 to 0.74.2

Release notes

Sourced from react-native's releases.

0.74.2

Changed

Fixed

Android specific

iOS specific

  • Privacy Manifest aggregation failing due to no NSPrivacyAccessedAPITypes key (fc4e099920 by @​renchap)
  • In privacy manifest post install script, handle the case where the file reference doesn't have a path (4ad65ac59a by @​robertying)
  • Fixed an issue where the selectionColor prop was not being applied on the TextInput component. (2bde626a9f by @​robinshin)

Hermes dSYMS:


You can file issues or pick requests against this release here.


To help you upgrade to this version, you can use the Upgrade Helper ⚛️.


View the whole changelog in the CHANGELOG.md file.

0.74.1

Added

iOS Specific

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.74.2

Changed

Fixed

Android specific

iOS specific

  • Privacy Manifest aggregation failing due to no NSPrivacyAccessedAPITypes key (fc4e099920 by @​renchap)
  • In privacy manifest post install script, handle the case where the file reference doesn't have a path (4ad65ac59a by @​robertying)
  • Fixed an issue where the selectionColor prop was not being applied on the TextInput component. (2bde626a9f by @​robinshin)

0.74.1

Added

iOS Specific

Changed

Android specific

Fixed

... (truncated)

Commits

Updates storybook from 7.6.16 to 8.1.10

Release notes

Sourced from storybook's releases.

v8.1.10

8.1.10

v8.1.9

8.1.9

v8.1.8

8.1.8

v8.1.7

8.1.7

v8.1.6

8.1.6

  • CLI: Only log UpgradeStorybookToSameVersionError but continue upgrade as normal - #27217, thanks @​kasperpeulen!
  • Core: Replace ip function with a small helper function to address security concerns - #27529, thanks @​tony19!
  • Tags: Fix unsafe project-level tags lookup - #27511, thanks @​shilman!
  • Vite: Fix stats-plugin to normalize file names with posix paths - #27218, thanks @​AlexAtVista!

v8.1.5

8.1.5

v8.1.4

8.1.4

... (truncated)

Changelog

Sourced from storybook's changelog.

8.1.10

8.1.9

8.1.8

8.1.7

8.1.6

  • CLI: Only log the UpgradeStorybookToSameVersionError but continue the upgrade as normal - #27217, thanks @​kasperpeulen!
  • Core: Replace ip function with a small helper function to address security concerns - #27529, thanks @​tony19!
  • Tags: Fix unsafe project-level tags lookup - #27511, thanks @​shilman!
  • Vite: Fix stats-plugin to normalize file names with posix paths - #27218, thanks @​AlexAtVista!

8.1.5

8.1.4

8.1.3

8.1.2

... (truncated)

Commits
  • 3fda293 Bump version from "8.1.9" to "8.1.10" [skip ci]
  • 01bb58e Bump version from "8.1.8" to "8.1.9" [skip ci]
  • 20fc7d3 Merge pull request #28226 from storybookjs/shilman/27096-fix-init-skip-install
  • 5362ff6 Merge pull request #26918 from fastfrwrd/fastfrwrd/25510-no-dev-for-init
  • 001c9d8 Bump version from "8.1.7" to "8.1.8" [skip ci]
  • 1882133 Merge pull request #28020 from deiga/patch-1
  • cc49ca8 Bump version from "8.1.6" to "8.1.7" [skip ci]
  • ad3205e Merge pull request #27536 from storybookjs/react_docgen_migration_typo
  • 27a643d Bump version from "8.1.5" to "8.1.6" [skip ci]
  • dba883d Merge pull request #27217 from storybookjs/kasper/disable-upgrade-to-same-ver...
  • Additional commits viewable in compare view

Updates ejs from 3.1.9 to 3.1.10

Release notes

Sourced from ejs's releases.

v3.1.10

Version 3.1.10

Commits

Updates protobufjs from 7.2.4 to 7.3.2

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.3.2

7.3.2 (2024-06-12)

Bug Fixes

  • docs: Update readme to correct command for creating types (#1939) (0f9d477)
  • Also fixes an issue with 7.3.1, where the dist/ folder containing the build artifacts was missing on npm.

protobufjs: v7.3.1

7.3.1 (2024-06-05)

Bug Fixes

  • types: reserved field in IType can contain reserved names (#2001) (d1d2c0c)

protobufjs: v7.3.0

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

protobufjs: v7.2.6

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

protobufjs: v7.2.5

7.2.5 (2023-08-21)

Bug Fixes

Changelog

Sourced from protobufjs's changelog.

7.3.2 (2024-06-12)

Bug Fixes

  • docs: Update readme to correct command for creating types (#1939) (0f9d477)

7.3.1 (2024-06-05)

Bug Fixes

  • types: reserved field in IType can contain reserved names (#2001) (d1d2c0c)

7.3.0 (2024-05-10)

Features

  • add handling for extension range options (#1990) (2d58011)

7.2.6 (2024-01-16)

Bug Fixes

  • report missing import properly in loadSync (#1960) (af3ff83)

7.2.5 (2023-08-21)

Bug Fixes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [next](https://github.com/vercel/next.js) | `13.5.1` | `14.1.1` |
| [zod](https://github.com/colinhacks/zod) | `3.22.4` | `3.23.8` |
| [postcss](https://github.com/postcss/postcss) | `8.4.36` | `8.4.38` |
| [@grpc/grpc-js](https://github.com/grpc/grpc-node) | `1.8.17` | `1.10.9` |
| [ws](https://github.com/websockets/ws) | `6.2.2` | `6.2.3` |
| [ip](https://github.com/indutny/node-ip) | `1.1.9` | `removed` |
| [react-native](https://github.com/facebook/react-native/tree/HEAD/packages/react-native) | `0.73.4` | `0.74.2` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `7.6.16` | `8.1.10` |



Updates `next` from 13.5.1 to 14.1.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v13.5.1...v14.1.1)

Updates `zod` from 3.22.4 to 3.23.8
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/main/CHANGELOG.md)
- [Commits](colinhacks/zod@v3.22.4...v3.23.8)

Updates `postcss` from 8.4.36 to 8.4.38
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.36...8.4.38)

Updates `@grpc/grpc-js` from 1.8.17 to 1.10.9
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected]...@grpc/[email protected])

Updates `ws` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@6.2.2...6.2.3)

Removes `ip`

Updates `react-native` from 0.73.4 to 0.74.2
- [Release notes](https://github.com/facebook/react-native/releases)
- [Changelog](https://github.com/facebook/react-native/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react-native/commits/v0.74.2/packages/react-native)

Updates `storybook` from 7.6.16 to 8.1.10
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.1.10/code/lib/cli)

Updates `ejs` from 3.1.9 to 3.1.10
- [Release notes](https://github.com/mde/ejs/releases)
- [Commits](mde/ejs@v3.1.9...v3.1.10)

Updates `protobufjs` from 7.2.4 to 7.3.2
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.4...protobufjs-v7.3.2)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: zod
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@grpc/grpc-js"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ip
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: react-native
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: ejs
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: protobufjs
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 18, 2024
Copy link

vercel bot commented Jun 18, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
dev-blog-tjoz ❌ Failed (Inspect) Jun 18, 2024 11:58pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants