search

brave / brave-talk

Unlimited private video calls with your friends and colleagues
Mozilla Public License 2.0
123 stars 35 forks source link

Update all non-major dependencies #1358

Closed renovate[bot] closed 9 months ago

renovate[bot] commented 9 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/react-dom (source) 18.2.18 -> 18.2.19 age adoption passing confidence
ethers (source) 6.10.0 -> 6.11.1 age adoption passing confidence
husky 9.0.10 -> 9.0.11 age adoption passing confidence
react-i18next 14.0.3 -> 14.0.5 age adoption passing confidence
webpack 5.90.1 -> 5.90.2 age adoption passing confidence

Release Notes

ethers-io/ethers.js (ethers) ### [`v6.11.1`](https://togithub.com/ethers-io/ethers.js/blob/HEAD/CHANGELOG.md#ethersv6111-2024-02-14-1313) [Compare Source](https://togithub.com/ethers-io/ethers.js/compare/v6.11.0...v6.11.1) - Throw an error when attempting to derive from a master path from a non-master node ([#​4551](https://togithub.com/ethers-io/ethers.js/issues/4551); [556fdd9](https://togithub.com/ethers-io/ethers.js/commit/556fdd91d9b6bf7db4041bb099e66b2080e1a985)). - Allow ENS wildcards with labels up to 255 bytes wide; discussed with ENS and deemed safe ([#​4543](https://togithub.com/ethers-io/ethers.js/issues/4543); [7f14bde](https://togithub.com/ethers-io/ethers.js/commit/7f14bdebf1aef6760462a1c2437c31f002b984fe)). - Enforce string is passed to toUtf8Bytes ([#​4583](https://togithub.com/ethers-io/ethers.js/issues/4583); [f45bb87](https://togithub.com/ethers-io/ethers.js/commit/f45bb87aefaf2c6c3a4991f6e30a81c227ae83c0)). - Fix transaction.index not being populated on some backends ([#​4591](https://togithub.com/ethers-io/ethers.js/issues/4591); [7f0e140](https://togithub.com/ethers-io/ethers.js/commit/7f0e140d5e3925a42e8bb2ac9eb1ba3fbd939864)). ### [`v6.11.0`](https://togithub.com/ethers-io/ethers.js/blob/HEAD/CHANGELOG.md#ethersv6110-2024-02-08-2026) [Compare Source](https://togithub.com/ethers-io/ethers.js/compare/v6.10.0...v6.11.0) - Allow transaction encoding for inferred type transactions ([f02211d](https://togithub.com/ethers-io/ethers.js/commit/f02211d055567b51373b5faa2c3dc6efe0523618)). - Added EIP-4788, receipts root and state root fields to Block ([#​4570](https://togithub.com/ethers-io/ethers.js/issues/4570); [c5f126f](https://togithub.com/ethers-io/ethers.js/commit/c5f126faf7d826b6a99df0ee578ff3d0ef409381)). - Added EIP-4844 fields to Provider classes and formatter ([#​4570](https://togithub.com/ethers-io/ethers.js/issues/4570); [7b4f2c1](https://togithub.com/ethers-io/ethers.js/commit/7b4f2c1a74db411829b5e8ef758bfa2ee21e5890)). - Assert BrowserProvider receives an EIP-1193 provider to fail early when passing undefined ethereum object ([b69f43b](https://togithub.com/ethers-io/ethers.js/commit/b69f43bc6f35da881ca7a0c8ccc5fda92edd076d)). - Add timeout to ContractTransactionResponse wait ([#​4497](https://togithub.com/ethers-io/ethers.js/issues/4497); [095de51](https://togithub.com/ethers-io/ethers.js/commit/095de51e605a9b88576e5e34fd55a6e32befa4eb)). - Allow override keyword in human-readable ABI and improve error messages ([#​4514](https://togithub.com/ethers-io/ethers.js/issues/4514), [#​4548](https://togithub.com/ethers-io/ethers.js/issues/4548); [be5ec2d](https://togithub.com/ethers-io/ethers.js/commit/be5ec2d327a503b2e5fc0f37c47eee9e828f8e23)). - Expand Contract sub-class to accept BaseContract super-class constructor arguments ([#​4538](https://togithub.com/ethers-io/ethers.js/issues/4538); [98496bc](https://togithub.com/ethers-io/ethers.js/commit/98496bc48ec23ce0d9c21d3c6c87e5b1b796a610)). - Allow network for default provider to be null to select mainnet ([#​4501](https://togithub.com/ethers-io/ethers.js/issues/4501); [b6bf7ab](https://togithub.com/ethers-io/ethers.js/commit/b6bf7aba62fb38839cd01858432b801cc5c28a11)). - Allow long dnsEncode names with optional length parameter ([#​4543](https://togithub.com/ethers-io/ethers.js/issues/4543); [a136348](https://togithub.com/ethers-io/ethers.js/commit/a1363483a56b0dee342595c8f44ed8fcce7ecca9)). - Fix parseLog signature when receiving read-only array for topics ([#​4029](https://togithub.com/ethers-io/ethers.js/issues/4029), [#​4459](https://togithub.com/ethers-io/ethers.js/issues/4459); [20cd8a2](https://togithub.com/ethers-io/ethers.js/commit/20cd8a23eaf8e8a14e2b51f7f64da4cb3e32fccb)). - Use Secure endpoints for BNB on Etherscan ([#​4525](https://togithub.com/ethers-io/ethers.js/issues/4525); [1f6e188](https://togithub.com/ethers-io/ethers.js/commit/1f6e1882515195bd67f0bce9fe347ec05107324b)). - Added holesky network and related end-points for supporting providers ([c6e6c43](https://togithub.com/ethers-io/ethers.js/commit/c6e6c432574a0b7e55c300ab3e470aafdace28b3)). - Added EIP-4844 BLOb transactions ([#​4554](https://togithub.com/ethers-io/ethers.js/issues/4554); [9c1e82e](https://togithub.com/ethers-io/ethers.js/commit/9c1e82e1230526ebcd62902890c4f24b1f7f7d79)). - Normalize EIP-712 types before computing the payload ([#​4541](https://togithub.com/ethers-io/ethers.js/issues/4541); [56c1361](https://togithub.com/ethers-io/ethers.js/commit/56c1361ee83db8b68859caf0850c95ff70e7e306)). - Updated thrid-part provider URLs for QuickNode ([2b4891d](https://togithub.com/ethers-io/ethers.js/commit/2b4891d86e72e849079cb1dc98b18e158b0c0620)). - Fixed normalization and abstracted EIP-712 Array parsing ([#​4541](https://togithub.com/ethers-io/ethers.js/issues/4541); [8f99601](https://togithub.com/ethers-io/ethers.js/commit/8f99601df1f26a8ba4d6d9dea5e033e7f688107e)). - Updated third-party provider network URLs ([#​4542](https://togithub.com/ethers-io/ethers.js/issues/4542); [84ca14f](https://togithub.com/ethers-io/ethers.js/commit/84ca14f1ffc5afbdd7f4c26a9b734ec5951eee3c)). - Added additional sepolia testnets ([4efef76](https://togithub.com/ethers-io/ethers.js/commit/4efef76e8cab0acaf1b2ba231a0148f9381bb1ee)). - Fix EIP-712 type aliases for uint and int ([#​4541](https://togithub.com/ethers-io/ethers.js/issues/4541); [43fb9c2](https://togithub.com/ethers-io/ethers.js/commit/43fb9c233696aeaa80b1c2b0e5fafce90e0ad508)). - Fixed typo in Error string ([#​4539](https://togithub.com/ethers-io/ethers.js/issues/4539); [7882905](https://togithub.com/ethers-io/ethers.js/commit/78829050853093bc5291ae78fc5a904044759aa0)). - Better debugging output on fetch errors ([bee07a0](https://togithub.com/ethers-io/ethers.js/commit/bee07a0750b448a9d13c2d57014bcf27f43e2ed7)).
typicode/husky (husky) ### [`v9.0.11`](https://togithub.com/typicode/husky/releases/tag/v9.0.11) [Compare Source](https://togithub.com/typicode/husky/compare/v9.0.10...v9.0.11) - chore: update package-lock.json by [@​btea](https://togithub.com/btea) in [https://github.com/typicode/husky/pull/1383](https://togithub.com/typicode/husky/pull/1383) - fix: husky=0 in init (fixes [#​1393](https://togithub.com/typicode/husky/issues/1393)) by [@​typicode](https://togithub.com/typicode) in [https://github.com/typicode/husky/pull/1395](https://togithub.com/typicode/husky/pull/1395)
i18next/react-i18next (react-i18next) ### [`v14.0.5`](https://togithub.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1405) [Compare Source](https://togithub.com/i18next/react-i18next/compare/v14.0.4...v14.0.5) - Fix [1691](https://togithub.com/i18next/react-i18next/issues/1691) for strict mode, by preserving change language binding [1720](https://togithub.com/i18next/react-i18next/pull/1720) ### [`v14.0.4`](https://togithub.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1404) [Compare Source](https://togithub.com/i18next/react-i18next/compare/v14.0.3...v14.0.4) - fix interpolation of the count prop [1719](https://togithub.com/i18next/react-i18next/issues/1719)
webpack/webpack (webpack) ### [`v5.90.2`](https://togithub.com/webpack/webpack/releases/tag/v5.90.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.1...v5.90.2) #### Bug Fixes - use `Math.imul` in `fnv1a32` to avoid loss of precision, directly hash UTF16 values - the `setStatus()` of the HMR module should not return an array, which may cause infinite recursion - `__webpack_exports_info__.xxx.canMangle` shouldn't always same as default - mangle export with destructuring - use new runtime to reconsider skipped connections `activeState` - make dynamic import optional in `try/catch` - improve auto publicPath detection #### Dependencies & Maintenance - improve CI setup and include Node.js@21

Configuration

📅 Schedule: Branch creation - " 0-4 * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 9 months ago

[puLL-Merge] - i18next/react-i18next@v14.0.3..v14.0.4

Description

This pull request updates the version to 14.0.4 in package.json, adds a new entry to the CHANGELOG.md file, and makes a code change in react-i18next.js and TransWithoutContext.js files to fix interpolation of the count prop.

Changes ### Changes - Updated package version to 14.0.4 in package.json - Added a new entry in the CHANGELOG.md for version 14.0.4 - Fixed interpolation of the count prop in TransWithoutContext.js - Updated test cases in test/i18n.js and test/trans.render.spec.jsx for the count interpolation

Security Hotspots

There are no security hotspots introduced in this pull request.

github-actions[bot] commented 9 months ago

[puLL-Merge] - i18next/react-i18next@v14.0.3..v14.0.5

Description

This pull request updates the react-i18next library by adding a new feature to support different notations for the count prop in translations.

Changes ### Changes - Updated `CHANGELOG.md` to include details about the new version 14.0.5 and the specific fixes and improvements introduced in this version. - Updated `package.json` to reflect the new version as 14.0.5. - Updated `react-i18next.js` to include new functions `alwaysNewT` and `useMemoizedT` for memoizing translation functions based on i18n instance, language, namespace, and keyPrefix. - Updated `react-i18next.min.js` for the minified version of the added functions. - Updated `src/TransWithoutContext.js` to include the new logic for handling count prop notation changes. - Updated `src/useTranslation.js` to include new functions for memoizing translation functions based on i18n instance, language, namespace, and keyPrefix. - Updated `test/i18n.js` to include test cases for the new count prop notation. - Updated `test/trans.render.spec.jsx` to include test cases for the new count prop notation. - Updated `test/useTranslation.spec.jsx` to include test cases for the new count prop notation.

Security Hotspots

socket-security[bot] commented 9 months ago

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/ethers@6.11.1

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

mrose17 commented 9 months ago

@SocketSecurity ignore npm/ethers@6.11.1

I spent an hour doing an in-depth examination of the differences between 6.10.0 and 6.11.1 ... lots of small changes, i then focused on the specific things that socket security was worried about. in all three cases: