chore(deps): bump shiki from 1.22.2 to 1.24.0 #5581

dependabot · 2024-12-02T20:48:49Z

Bumps shiki from 1.22.2 to 1.24.0.

Release notes

v1.24.0

   🚀 Features

Bump oniguruma-to-es for grammar support and perf - by @slevithan in shikijs/shiki#842 (fc875)

Improve js engine support (and run tests) in pre-ES2024 envs - by @slevithan in shikijs/shiki#847 (76cbc)

Bump js engine dependencies to support more grammars - by @slevithan in shikijs/shiki#850 (991a3)

Update deps, support new languages - by @antfu (38e90)

   🐞 Bug Fixes

monaco: Add missing theme fontStyle and background - by @lejunyang and lejunyang in shikijs/shiki#849 (43ff1)

    View changes on GitHub

v1.23.1

   🚀 Features

Bump Oniguruma-To-ES dep to support more grammars and simplify - by @slevithan in shikijs/shiki#836 (4a9cd)

    View changes on GitHub

v1.23.0

   🚀 Features

Port @michael-makes/shiki-colorized-brackets JSR package - by @MichaelMakesGames in shikijs/shiki#831 (94cc6)

Use Oniguruma-To-ES in the JS engine - by @slevithan and @antfu in shikijs/shiki#828 and shikijs/shiki#832 (33b8b)

transformers: Add Style to Class transformer - by @antfu in shikijs/shiki#826 (48d6c)

vitepress-twoslash: Cache type informations to improve performance - by @nakasyou and @antfu in shikijs/shiki#798 (45fd3)

    View changes on GitHub

Commits

d1c87fa chore: release v1.24.0
38e908b feat: update deps, support new languages
76cbc7e feat: improve js engine support (and run tests) in pre-ES2024 envs (#847)
1da0bc8 chore: release v1.23.1
1a687ad chore: release v1.23.0
96dd596 chore: update deps
33b8b49 feat: Use Oniguruma-To-ES in the JS engine (#828) (#832)
93246cd chore: typo (#825)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR updates the version of the shiki package across multiple applications and modifies the pnpm-lock.yaml file to reflect these changes, ensuring compatibility with the latest version.

Detailed summary

Updated shiki from 1.22.2 to 1.24.0 in:
- apps/dashboard/package.json
- apps/portal/package.json
- apps/playground-web/package.json
Updated pnpm-lock.yaml to reflect the new shiki version and its dependencies.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) from 1.22.2 to 1.24.0. - [Release notes](https://github.com/shikijs/shiki/releases) - [Changelog](https://github.com/shikijs/shiki/blob/main/CHANGELOG.md) - [Commits](https://github.com/shikijs/shiki/commits/v1.24.0/packages/shiki) --- updated-dependencies: - dependency-name: shiki dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

vercel · 2024-12-02T20:48:54Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Updated (UTC)
docs-v2	🛑 Canceled (Inspect)	Dec 2, 2024 8:50pm
thirdweb_playground	🛑 Canceled (Inspect)	Dec 2, 2024 8:50pm
thirdweb-www	🛑 Canceled (Inspect)	Dec 2, 2024 8:50pm
wallet-ui	🛑 Canceled (Inspect)	Dec 2, 2024 8:50pm

changeset-bot · 2024-12-02T20:48:54Z

⚠️ No Changeset found

Latest commit: 9cb701e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

graphite-app · 2024-12-02T20:48:57Z

Your org has enabled the Graphite merge queue for merging into main

Add the label “merge-queue” to the PR and Graphite will automatically add it to the merge queue when it’s ready to merge. Or use the label “hotfix” to add to the merge queue as a hot fix.

You must have a Graphite account and log in to Graphite in order to use the merge queue. Sign up using this link.

socket-security · 2024-12-02T20:50:10Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	None	`+41`	13.3 MB	antfu

🚮 Removed packages: npm/[email protected]

View full report↗︎

socket-security · 2024-12-02T20:50:12Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Possible typosquat attack	npm/[email protected]	Did you mean: emoji-regex~~-xs~~	`apps/dashboard/package.json` `apps/playground-web/package.json` `apps/portal/package.json` `pnpm-lock.yaml`	⚠︎

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/[email protected]

dependabot · 2024-12-02T20:50:22Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot requested a review from gregfromstl as a code owner December 2, 2024 20:48

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 2, 2024

dependabot bot requested review from MananTank, jnsdls and joaquim-verges as code owners December 2, 2024 20:48

vercel bot temporarily deployed to Preview – docs-v2 December 2, 2024 20:48 Inactive

github-actions bot added Dashboard Involves changes to the Dashboard. Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. labels Dec 2, 2024

vercel bot temporarily deployed to Preview – thirdweb_playground December 2, 2024 20:49 Inactive

vercel bot temporarily deployed to Preview – wallet-ui December 2, 2024 20:49 Inactive

jnsdls closed this Dec 2, 2024

dependabot bot deleted the dependabot/npm_and_yarn/shiki-1.24.0 branch December 2, 2024 20:50

vercel bot temporarily deployed to Preview – thirdweb-www December 2, 2024 20:50 Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump shiki from 1.22.2 to 1.24.0 #5581

chore(deps): bump shiki from 1.22.2 to 1.24.0 #5581

Uh oh!

dependabot bot commented on behalf of github Dec 2, 2024 •

edited by pr-codex bot

Loading

Uh oh!

vercel bot commented Dec 2, 2024 •

edited

Loading

Uh oh!

changeset-bot bot commented Dec 2, 2024

Uh oh!

graphite-app bot commented Dec 2, 2024

Uh oh!

socket-security bot commented Dec 2, 2024

Uh oh!

socket-security bot commented Dec 2, 2024

Uh oh!

dependabot bot commented on behalf of github Dec 2, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump shiki from 1.22.2 to 1.24.0 #5581

chore(deps): bump shiki from 1.22.2 to 1.24.0 #5581

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 2, 2024 • edited by pr-codex bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.24.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v1.23.1

🚀 Features

View changes on GitHub

v1.23.0

🚀 Features

View changes on GitHub

PR-Codex overview

Detailed summary

Uh oh!

vercel bot commented Dec 2, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot bot commented Dec 2, 2024

⚠️ No Changeset found

Uh oh!

graphite-app bot commented Dec 2, 2024

Your org has enabled the Graphite merge queue for merging into main

Uh oh!

socket-security bot commented Dec 2, 2024

Uh oh!

socket-security bot commented Dec 2, 2024

Next steps

Uh oh!

dependabot bot commented on behalf of github Dec 2, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Dec 2, 2024 •

edited by pr-codex bot

Loading

vercel bot commented Dec 2, 2024 •

edited

Loading