brianlovin / security-checklist

A checklist for staying safe on the internet
https://brianlovin.com/security
MIT License
922 stars 76 forks source link

Bump next from 9.5.1 to 9.5.2 #592

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 3 years ago

Bumps next from 9.5.1 to 9.5.2.

Release notes

Sourced from next's releases.

v9.5.2

Core Changes

  • Fix hot reloader edge case with broken webpack plugins: #15659
  • Add additional pageProps check: #15667
  • Error overlay should not be dismissable for a server error: #14011
  • Strictly type react-dev-overlay: #15669
  • Fix wrong asPath on 404: #15728
  • Complile for ES5 in webpack 5 build: #15708
  • Remove unused error: #15748
  • Fix asPath of rewrite without basePath: #15760
  • Improve router types: #15775
  • Fix dotenv loading with cascading values: #15799
  • Solve large portion of webpack 5 deprecation warnings: #15806
  • Fix some webpack 5 deprecation warnings: #15797
  • Rename exportTrailingSlash to existing trailingSlash property: #15768
  • Support persisting the dev cache buster: #15827
  • Fix CSS grid-column shorthand syntax: #15848
  • Add missing nomodule polyfills and suggest using features only up to ES2019 for browser compatibility: #15772
  • Bug fix: Font optimization: #15644
  • Progress bar for static build: #15297
  • Incremental static generation and regeneration in build output table: #14365
  • Add support for fallback: 'blocking': #15672
  • fixed issue with runtime-config returning undefined when building or in a development environment: #15777
  • Disallow basePath: false for internal routes: #15837
  • Run Fast Refresh Loader in Babel Loader: #15851
  • Add experimental image post-processing: #15875
  • Allow absolute urls in router and Link: #15792
  • Enhance module not found error: #15860
  • Normalize serverless asPath value: #15914
  • Adjust overlay modal padding on mobile: #15915
  • Disallow re-export all exports from Next.js pages: #14325
  • Delay server start message until it's listening: #15929
  • Warn when Fast Refresh is disabled (React <16.10): #15931
  • Remove querystring from the client: #15378
  • Improve Vercel's badge: #15946
  • notify component when route hash changes: #13894
  • Added Friendly error for res.redirect 🐝: #15844
  • Fix asPath normalizing for non-dynamic pages: #15960
  • Make helpers.ts compatible with ie11: #15973
  • Bug fix: Font optimization: #15984
  • Fix amphtml link rel not respecting basePath: #15949
  • Add browser polyfils for Node.js modules (webpack 5 backwards compat): #16022
  • Move next-codemod to Next.js monorepo: #15536
  • Resolve alias modules: #16033
  • Add cli for @next/codemod: #16039
  • Do not bundle caniuse-lite: #16048
  • upgrade @ampproject/toolbox-optimizer to 2.6.0: #16043
  • Do not assign to readonly property in Safari: #16051
  • Improvements - Font optimizations: #16031
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
vercel[bot] commented 3 years ago

This pull request is being automatically deployed with Vercel (learn more). To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/brianlovin/security-checklist/9rswbafg6 ✅ Preview: https://security-checklist-git-dependabot-npmandyarnnext-952.brianlovin.vercel.app

lighthouse-metrics[bot] commented 3 years ago

https://security-checklist-9rswbafg6.vercel.app/:

Lighthouse Scores for https://security-checklist-9rswbafg6.vercel.app/