Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update app dependencies (main) #2690

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 13, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@react-three/drei ^9.121.4 -> ^9.121.5 age adoption passing confidence
@sanity/ui (source) 2.12.3 -> 2.13.0 age adoption passing confidence
@sveltejs/kit (source) ^2.17.1 -> ^2.17.2 age adoption passing confidence
@tinloof/sanity-studio (source) 1.8.0 -> 1.9.0 age adoption passing confidence
astro (source) ^5.2.6 -> ^5.3.0 age adoption passing confidence
eslint-import-resolver-typescript ^3.7.0 -> ^3.8.0 age adoption passing confidence
framer-motion ^12.4.2 -> ^12.4.3 age adoption passing confidence
next-sanity (source) 9.8.56 -> 9.8.57 age adoption passing confidence
next-sanity (source) ^9.8.56 -> ^9.8.57 age adoption passing confidence
prettier (source) ^3.5.0 -> ^3.5.1 age adoption passing confidence

Release Notes

pmndrs/drei (@​react-three/drei)

v9.121.5

Compare Source

Bug Fixes
  • do not use getElapsedTime on the main state clock, it messes up the delta (#​2341) (63d175f)
sanity-io/ui (@​sanity/ui)

v2.13.0

Compare Source

Features
  • button: add textWeight property (d5a9672)

v2.12.4

Compare Source

Bug Fixes
sveltejs/kit (@​sveltejs/kit)

v2.17.2

Compare Source

Patch Changes
  • fix: add promise return type to the enhance action callback (#​13420)

  • fix: change server-side route resolution endpoint (#​13461)

tinloof/sanity-kit (@​tinloof/sanity-studio)

v1.9.0

Compare Source

Minor Changes
withastro/astro (astro)

v5.3.0

Compare Source

Minor Changes
  • #​13210 344e9bc Thanks @​VitaliyR! - Handle HEAD requests to an endpoint when a handler is not defined.

    If an endpoint defines a handler for GET, but does not define a handler for HEAD, Astro will call the GET handler and return the headers and status but an empty body.

  • #​13195 3b66955 Thanks @​MatthewLymer! - Improves SSR performance for synchronous components by avoiding the use of Promises. With this change, SSR rendering of on-demand pages can be up to 4x faster.

  • #​13145 8d4e566 Thanks @​ascorbic! - Adds support for adapters auto-configuring experimental session storage drivers.

    Adapters can now configure a default session storage driver when the experimental.session flag is enabled. If a hosting platform has a storage primitive that can be used for session storage, the adapter can automatically configure the session storage using that driver. This allows Astro to provide a more seamless experience for users who want to use sessions without needing to manually configure the session storage.

Patch Changes
  • #​13145 8d4e566 Thanks @​ascorbic! - ⚠️ BREAKING CHANGE FOR EXPERIMENTAL SESSIONS ONLY ⚠️

    Changes the experimental.session option to a boolean flag and moves session config to a top-level value. This change is to allow the new automatic session driver support. You now need to separately enable the experimental.session flag, and then configure the session driver using the top-level session key if providing manual configuration.

    defineConfig({
      // ...
      experimental: {
    -    session: {
    -      driver: 'upstash',
    -    },
    +    session: true,
      },
    +  session: {
    +    driver: 'upstash',
    +  },
    });

    You no longer need to configure a session driver if you are using an adapter that supports automatic session driver configuration and wish to use its default settings.

    defineConfig({
      adapter: node({
        mode: "standalone",
      }),
      experimental: {
    -    session: {
    -      driver: 'fs',
    -      cookie: 'astro-cookie',
    -    },
    +    session: true,
      },
    +  session: {
    +    cookie: 'astro-cookie',
    +  },
    });

    However, you can still manually configure additional driver options or choose a non-default driver to use with your adapter with the new top-level session config option. For more information, see the experimental session docs.

  • #​13101 2ed67d5 Thanks @​corneliusroemer! - Fixes a bug where HEAD and OPTIONS requests for non-prerendered pages were incorrectly rejected with 403 FORBIDDEN

import-js/eslint-import-resolver-typescript (eslint-import-resolver-typescript)

v3.8.0

Compare Source

Minor Changes
  • #​345 fcc8883 Thanks @​carlocorradini! - Enable the mapper function just for a set of allowed files. Improves project discovery using glob and POSIX separator.

  • #​346 c124e87 Thanks @​carlocorradini! - Update get-tsconfig to the the latest version. We now support the ${configDir} variable, introduced in TypeScript 5.5.

motiondivision/motion (framer-motion)

v12.4.3

Compare Source

Fixed
  • Restored warning for when animating more than two keyframes with a spring.
sanity-io/next-sanity (next-sanity)

v9.8.57

Compare Source

Bug Fixes
prettier/prettier (prettier)

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.


Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate renovate bot requested a review from a team as a code owner February 13, 2025 13:49
@renovate renovate bot enabled auto-merge (squash) February 13, 2025 13:49
Copy link

vercel bot commented Feb 13, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
live-visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-astro ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-next-with-i18n ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-nuxt ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-page-builder-demo ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-remix ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-storybook ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm
visual-editing-studio ✅ Ready (Inspect) Visit Preview Feb 14, 2025 8:31pm
visual-editing-svelte ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 14, 2025 8:31pm

Copy link

socket-security bot commented Feb 13, 2025

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@next/[email protected] 🔁 npm/@next/[email protected] Transitive: environment, filesystem, network, shell +18 2.31 MB matt.straka, rauchg, timer, ...2 more
npm/@react-three/[email protected] 🔁 npm/@react-three/[email protected] Transitive: environment, filesystem, shell, unsafe +57 84.1 MB codyjasonbennett, drcmda, giulioz, ...3 more
npm/@sveltejs/[email protected] 🔁 npm/@sveltejs/[email protected] Transitive: environment, filesystem, network, shell +31 5.39 MB conduitry, dominik_g, rich_harris, ...1 more
npm/@tinloof/[email protected] 🔁 npm/@tinloof/[email protected] None +19 3.34 MB tinloof-user
npm/[email protected] 🔁 npm/[email protected] Transitive: environment, eval, filesystem, network, shell +274 45.5 MB fredkschott, matthewp, natemoo-re
npm/[email protected] 🔁 npm/[email protected] Transitive: environment, eval, filesystem +149 6.98 MB vercel-release-bot
npm/[email protected] 🔁 npm/[email protected] None 0 185 kB acdlite, brianvaughn, eps1lon, ...4 more
npm/[email protected] 🔁 npm/[email protected] environment +2 2.65 MB alecmev-framer, andrey-framer, andrey.ozornin, ...51 more
npm/[email protected] 🔁 npm/[email protected] Transitive: eval, filesystem, network, shell, unsafe +1407 375 MB adoprog, armandocerna, ash, ...69 more
npm/[email protected] 🔁 npm/[email protected] Transitive: environment, filesystem +12 117 MB rauchg, timneutkens, vercel-release-bot
npm/[email protected] None 0 7.88 MB prettier-bot

View full report↗︎

@renovate renovate bot force-pushed the renovate/main-app-dependencies branch from e05bba0 to 7827bd7 Compare February 13, 2025 18:28
@renovate renovate bot force-pushed the renovate/main-app-dependencies branch from 7827bd7 to 6883937 Compare February 14, 2025 01:38
Copy link

socket-security bot commented Feb 14, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 - Not allowed by license policy (package/dist/compiled/glob/LICENSE, package/dist/compiled/glob/LICENSE)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot force-pushed the renovate/main-app-dependencies branch from 36d3cc7 to 8d4d4e9 Compare February 14, 2025 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants