SocialGouv / e2esdk

SDK to build end-to-end encrypted web applications
https://socialgouv.github.io/e2esdk
Apache License 2.0
20 stars 0 forks source link

fix(deps): update dependency framer-motion to v9 - autoclosed #40

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
framer-motion ^8.4.6 -> ^9.0.0 age adoption passing confidence

Release Notes

framer/motion ### [`v9.1.7`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​917-2023-02-24) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.6...v9.1.7) ##### Fixed - Switching `const enum` for types. ### [`v9.1.6`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​916-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.5...v9.1.6) ##### Added - Exporting `scroll` for internal use inside Framer. ### [`v9.1.5`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​915-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.4...v9.1.5) ##### Fixed - Changing `Feature` to `Feature`. ### [`v9.1.4`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​914-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.3...v9.1.4) ##### Fixed - Fixing types of `useScroll`. ### [`v9.1.3`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​913-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.2...v9.1.3) ##### Updated - Limiting propagation of dirty projection nodes for improved layout animation performance. ### [`v9.1.2`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​912-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.1...v9.1.2) ##### Updated - Replacing `type enum` with `const enum` for smaller bundlesize. ### [`v9.1.1`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​911-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.1.0...v9.1.1) ##### Updated - Removing external dependencies. ### [`v9.1.0`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​910-2023-02-23) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.7...v9.1.0) ##### Added - Hardware acceleration of `clipPath`, `filter` and `transform` styles. ### [`v9.0.7`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​907-2023-02-21) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.6...v9.0.7) ##### Fixed - Improving types of `color.parse()`. ### [`v9.0.6`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​906-2023-02-21) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.5...v9.0.6) ##### Added - Exporting animation types for internal Framer use. ### [`v9.0.5`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​905-2023-02-21) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.4...v9.0.5) ##### Added - Adding legacy Popmotion exports for internal Framer use. ### [`v9.0.4`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​904-2023-02-16) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.3...v9.0.4) ##### Updated - 25% speed improvement for transform string creation. ### [`v9.0.3`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​903-2023-02-14) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.2...v9.0.3) ##### Updated - Refactored `motion` component features to load without React components. - Deprecated fallback behavior for missing `IntersectionObserver`. ### [`v9.0.2`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​902-2023-02-07) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.1...v9.0.2) ##### Changed - `Reorder.Item` no longer throws an error within `MotionConfig strict`. ### [`v9.0.1`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​901-2023-02-02) [Compare Source](https://togithub.com/framer/motion/compare/v9.0.0...v9.0.1) ##### Removed - Tap events no longer suspend `tabindex` attribute for the duration of the gesture. ### [`v9.0.0`](https://togithub.com/framer/motion/blob/HEAD/CHANGELOG.md#​900-2023-02-01) [Compare Source](https://togithub.com/framer/motion/compare/v8.5.5...v9.0.0) ##### Added - Tap events are now keyboard accessible. ##### Changed - `whileFocus` only triggers according to `focus-visible` rules.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

socket-security[bot] commented 1 year ago

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
@swc/core@1.3.32 (upgraded) postinstall config/jest/package.json via @swc/jest@0.2.24, packages/server/package.json via @swc/cli@0.1.60
turbo@1.7.1 (upgraded) postinstall package.json
Pull request report summary
Issue Status
Install scripts ⚠️ 2 issues
Native code ✅ 0 issues
Bin script confusion ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

  • @SocketSecurity ignore @swc/core@1.3.32
  • @SocketSecurity ignore turbo@1.7.1

Powered by socket.dev