Update dependencies - Githubissues

This PR contains the following updates:

Package	Type	Update	Change
hono (source)	dependencies	patch	`4.5.5` -> `4.5.11`
next (source)	dependencies	patch	`14.2.5` -> `14.2.8`
open-graph-scraper	dependencies	minor	`6.7.2` -> `6.8.1`
the-new-css-reset	dependencies	patch	`1.11.2` -> `1.11.3`

Release Notes

honojs/hono (hono)

### [`v4.5.11`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.11) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.10...v4.5.11) #### What's Changed - fix(jsx): race condition in ErrorBoundary with event loop by [@usualoma](https://redirect.github.com/usualoma) in [https://github.com/honojs/hono/pull/3343](https://redirect.github.com/honojs/hono/pull/3343) - perf(jsx): skip the special behavior when the element is in the head. by [@usualoma](https://redirect.github.com/usualoma) in [https://github.com/honojs/hono/pull/3352](https://redirect.github.com/honojs/hono/pull/3352) - refactor(utils/body): shorten the code by [@yusukebe](https://redirect.github.com/yusukebe) in [https://github.com/honojs/hono/pull/3353](https://redirect.github.com/honojs/hono/pull/3353) - docs: `Twitter` to `X` by [@yusukebe](https://redirect.github.com/yusukebe) in [https://github.com/honojs/hono/pull/3354](https://redirect.github.com/honojs/hono/pull/3354) - chore: fix typo in JSDoc by [@taga3s](https://redirect.github.com/taga3s) in [https://github.com/honojs/hono/pull/3364](https://redirect.github.com/honojs/hono/pull/3364) - refactor(utils/basic-auth): Moved Internal function to utils by [@sugar-cat7](https://redirect.github.com/sugar-cat7) in [https://github.com/honojs/hono/pull/3359](https://redirect.github.com/honojs/hono/pull/3359) #### New Contributors - [@taga3s](https://redirect.github.com/taga3s) made their first contribution in [https://github.com/honojs/hono/pull/3364](https://redirect.github.com/honojs/hono/pull/3364) - [@sugar-cat7](https://redirect.github.com/sugar-cat7) made their first contribution in [https://github.com/honojs/hono/pull/3359](https://redirect.github.com/honojs/hono/pull/3359) **Full Changelog**: https://github.com/honojs/hono/compare/v4.5.10...v4.5.11 ### [`v4.5.10`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.10) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.9...v4.5.10) #### What's Changed - feat(compress): improve compress middleware by [@nitedani](https://redirect.github.com/nitedani) in [https://github.com/honojs/hono/pull/3317](https://redirect.github.com/honojs/hono/pull/3317) - feat(jsx): add popover api attributes by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3323](https://redirect.github.com/honojs/hono/pull/3323) - feat(jsx): improve form attribute types by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3330](https://redirect.github.com/honojs/hono/pull/3330) - chore(test): migrate to vitest v2 by [@yasuaki640](https://redirect.github.com/yasuaki640) in [https://github.com/honojs/hono/pull/3326](https://redirect.github.com/honojs/hono/pull/3326) - chore(test): replace deprecated vitest type by [@yasuaki640](https://redirect.github.com/yasuaki640) in [https://github.com/honojs/hono/pull/3338](https://redirect.github.com/honojs/hono/pull/3338) - fix(logger): removing spaces from logger by [@marceloverdijk](https://redirect.github.com/marceloverdijk) in [https://github.com/honojs/hono/pull/3334](https://redirect.github.com/honojs/hono/pull/3334) #### New Contributors - [@nitedani](https://redirect.github.com/nitedani) made their first contribution in [https://github.com/honojs/hono/pull/3317](https://redirect.github.com/honojs/hono/pull/3317) - [@marceloverdijk](https://redirect.github.com/marceloverdijk) made their first contribution in [https://github.com/honojs/hono/pull/3334](https://redirect.github.com/honojs/hono/pull/3334) **Full Changelog**: https://github.com/honojs/hono/compare/v4.5.9...v4.5.10 ### [`v4.5.9`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.9) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.8...v4.5.9) #### What's Changed - test(types): broken test in future versions of typescript by [@m-shaka](https://redirect.github.com/m-shaka) in [https://github.com/honojs/hono/pull/3310](https://redirect.github.com/honojs/hono/pull/3310) - fix(utils/color): Deno does not require permission for `NO_COLOR` by [@ryuapp](https://redirect.github.com/ryuapp) in [https://github.com/honojs/hono/pull/3306](https://redirect.github.com/honojs/hono/pull/3306) - feat(jsx): improve `type` (MIME) attribute types by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3305](https://redirect.github.com/honojs/hono/pull/3305) - feat(pretty-json): support custom query by [@nakasyou](https://redirect.github.com/nakasyou) in [https://github.com/honojs/hono/pull/3300](https://redirect.github.com/honojs/hono/pull/3300) **Full Changelog**: https://github.com/honojs/hono/compare/v4.5.8...v4.5.9 ### [`v4.5.8`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.8) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.7...v4.5.8) #### Security Fix for CSRF Protection Middleware Before this release, in versions 4.5.7 and below, the CSRF Protection Middleware did not treat requests including `Content-Types` with uppercase letters (e.g., `Application/x-www-form-urlencoded`) as potential attacks, allowing them to pass. This could cause unexpected behavior, leading to a vulnerability. If you are using the CSRF Protection Middleware, please upgrade to version 4.5.8 or higher immediately. For more details, see the report here: https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5 ### [`v4.5.7`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.7) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.6...v4.5.7) #### What's Changed - fix(jsx/dom): Fixed a bug that caused Script elements to turn into Style elements. by [@usualoma](https://redirect.github.com/usualoma) in [https://github.com/honojs/hono/pull/3294](https://redirect.github.com/honojs/hono/pull/3294) - perf(jsx/dom): improve performance by [@usualoma](https://redirect.github.com/usualoma) in [https://github.com/honojs/hono/pull/3288](https://redirect.github.com/honojs/hono/pull/3288) - feat(jsx): improve a-tag types with well known values by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3287](https://redirect.github.com/honojs/hono/pull/3287) - fix(validator): Fixed a bug in hono/validator where URL Encoded Data could not be validated if the Content-Type included charset. by [@uttk](https://redirect.github.com/uttk) in [https://github.com/honojs/hono/pull/3297](https://redirect.github.com/honojs/hono/pull/3297) - feat(jsx): improve `target` and `formtarget` attribute types by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3299](https://redirect.github.com/honojs/hono/pull/3299) - docs(README): change Twitter to X by [@nakasyou](https://redirect.github.com/nakasyou) in [https://github.com/honojs/hono/pull/3301](https://redirect.github.com/honojs/hono/pull/3301) - fix(client): replace optional params to url correctly by [@yusukebe](https://redirect.github.com/yusukebe) in [https://github.com/honojs/hono/pull/3304](https://redirect.github.com/honojs/hono/pull/3304) - feat(jsx): improve input attribute types based on react by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3302](https://redirect.github.com/honojs/hono/pull/3302) #### New Contributors - [@uttk](https://redirect.github.com/uttk) made their first contribution in [https://github.com/honojs/hono/pull/3297](https://redirect.github.com/honojs/hono/pull/3297) **Full Changelog**: https://github.com/honojs/hono/compare/v4.5.6...v4.5.7 ### [`v4.5.6`](https://redirect.github.com/honojs/hono/releases/tag/v4.5.6) [Compare Source](https://redirect.github.com/honojs/hono/compare/v4.5.5...v4.5.6) #### What's Changed - fix(jsx): handle async component error explicitly and throw the error in the response by [@usualoma](https://redirect.github.com/usualoma) in [https://github.com/honojs/hono/pull/3274](https://redirect.github.com/honojs/hono/pull/3274) - fix(validator): support multipart headers without a separating space by [@Ernxst](https://redirect.github.com/Ernxst) in [https://github.com/honojs/hono/pull/3286](https://redirect.github.com/honojs/hono/pull/3286) - fix(validator): Allow form data will mutliple values appended by [@nicksrandall](https://redirect.github.com/nicksrandall) in [https://github.com/honojs/hono/pull/3273](https://redirect.github.com/honojs/hono/pull/3273) - feat(jsx): improve meta-tag types with well known values by [@ssssota](https://redirect.github.com/ssssota) in [https://github.com/honojs/hono/pull/3276](https://redirect.github.com/honojs/hono/pull/3276) #### New Contributors - [@Ernxst](https://redirect.github.com/Ernxst) made their first contribution in [https://github.com/honojs/hono/pull/3286](https://redirect.github.com/honojs/hono/pull/3286) - [@ssssota](https://redirect.github.com/ssssota) made their first contribution in [https://github.com/honojs/hono/pull/3276](https://redirect.github.com/honojs/hono/pull/3276) **Full Changelog**: https://github.com/honojs/hono/compare/v4.5.5...v4.5.6

vercel/next.js (next)

### [`v14.2.8`](https://redirect.github.com/vercel/next.js/releases/tag/v14.2.8) [Compare Source](https://redirect.github.com/vercel/next.js/compare/v14.2.7...v14.2.8) #### What's Changed > \[!NOTE]\ > This release is backporting bug fixes and minor improvements. It does **not** include all pending features/changes on canary. ##### Support `esmExternals` in app directory - Support esm externals in app router ([#65041](https://redirect.github.com/vercel/next.js/issues/65041)) - Turbopack: Allow client components from foreign code in app routes ([#64751](https://redirect.github.com/vercel/next.js/issues/64751)) - Turbopack: add support for esm externals in app dir ([#64918](https://redirect.github.com/vercel/next.js/issues/64918)) - other related PRs: [#66990](https://redirect.github.com/vercel/next.js/issues/66990) [#66727](https://redirect.github.com/vercel/next.js/issues/66727) [#66286](https://redirect.github.com/vercel/next.js/issues/66286) [#65519](https://redirect.github.com/vercel/next.js/issues/65519) ##### Reading cookies set in middleware in components and actions - initialize ALS with cookies in middleware ([#65008](https://redirect.github.com/vercel/next.js/issues/65008)) - fix middleware cookie initialization ([#65820](https://redirect.github.com/vercel/next.js/issues/65820)) - ensure cookies set in middleware can be read in a server action ([#67924](https://redirect.github.com/vercel/next.js/issues/67924)) - fix: merged middleware cookies should preserve options ([#67956](https://redirect.github.com/vercel/next.js/issues/67956)) ##### Metadata and icons - support facebook-specific metadata (`fb:app_id`, `fb:admins`) in generateMetaData ([#65713](https://redirect.github.com/vercel/next.js/issues/65713)) - Always collect static icons for all segments ([#68712](https://redirect.github.com/vercel/next.js/issues/68712)) - Fix favicon merging with customized icons ([#67982](https://redirect.github.com/vercel/next.js/issues/67982)) - Warn metadataBase missing in standalone mode or non vercel deployment ([#66296](https://redirect.github.com/vercel/next.js/issues/66296)) ##### Parallel routes fixes - fix missing stylesheets when parallel routes are present ([#69507](https://redirect.github.com/vercel/next.js/issues/69507)) ##### Draft mode and edge improvements - fix: unstable_cache should not cache new result in draft mode ([#67772](https://redirect.github.com/vercel/next.js/issues/67772)) - Add draft mode flag for multi-zone ([#68997](https://redirect.github.com/vercel/next.js/issues/68997)) - Fix edge preview props are not matched with cookie ([#67779](https://redirect.github.com/vercel/next.js/issues/67779)) - other related PRs: [#65426](https://redirect.github.com/vercel/next.js/issues/65426), [#67787](https://redirect.github.com/vercel/next.js/issues/67787), [#64946](https://redirect.github.com/vercel/next.js/issues/64946), [#64313](https://redirect.github.com/vercel/next.js/issues/64313), [#64370](https://redirect.github.com/vercel/next.js/issues/64370) ##### `next/image` fixes - Allow external image urls with \_next/image pathname to be rendered via Image component ([#69586](https://redirect.github.com/vercel/next.js/issues/69586)) ##### Server actions improvements - optimize server actions ([#66523](https://redirect.github.com/vercel/next.js/issues/66523)) - Apply optimization for unused actions ([#69178](https://redirect.github.com/vercel/next.js/issues/69178)) - Improve SWC transform ID generation ([#69183](https://redirect.github.com/vercel/next.js/issues/69183)) ##### Other changes - Ensure we match comment minify behavior between terser and swc ([#68372](https://redirect.github.com/vercel/next.js/issues/68372)) - send initialCanonicalUrl in array format to prevent crawler confusion ([#69509](https://redirect.github.com/vercel/next.js/issues/69509)) ##### Create-next-app updates - enable [@typescript-eslint/recommended](https://redirect.github.com/typescript-eslint/recommended) in create-next-app --typescript ([#52845](https://redirect.github.com/vercel/next.js/issues/52845)) - Update create-next-app template CSS ([#66233](https://redirect.github.com/vercel/next.js/issues/66233)) - Update `create-next-app` template CSS ([#66043](https://redirect.github.com/vercel/next.js/issues/66043)) - Update create-next-app template ([#65803](https://redirect.github.com/vercel/next.js/issues/65803)) - add font antialiasing to templates ([#67425](https://redirect.github.com/vercel/next.js/issues/67425)) - Move `create-next-app` public/ assets from local folder→ remote URL ([#66931](https://redirect.github.com/vercel/next.js/issues/66931)) - Use classnames to set font family in Tailwind create-next-app templates ([#66374](https://redirect.github.com/vercel/next.js/issues/66374)) - other related PRs: [#64478](https://redirect.github.com/vercel/next.js/issues/64478), [#68899](https://redirect.github.com/vercel/next.js/issues/68899), [#68534](https://redirect.github.com/vercel/next.js/issues/68534), [#69021](https://redirect.github.com/vercel/next.js/issues/69021), [#67146](https://redirect.github.com/vercel/next.js/issues/67146), [#66145](https://redirect.github.com/vercel/next.js/issues/66145) **Full Changelog**: https://github.com/vercel/next.js/compare/v14.2.7...v14.2.8 *** Huge thanks to everyone who contributed to this release: [@abhi12299](https://redirect.github.com/abhi12299), [@delbaoliveira](https://redirect.github.com/delbaoliveira), [@eps1lon](https://redirect.github.com/eps1lon), [@ForsakenHarmony](https://redirect.github.com/ForsakenHarmony), [@huozhi](https://redirect.github.com/huozhi), [@ijjk](https://redirect.github.com/ijjk), [@JoshuaKGoldberg](https://redirect.github.com/JoshuaKGoldberg), [@leerob](https://redirect.github.com/leerob), [@lubieowoce](https://redirect.github.com/lubieowoce), [@Netail](https://redirect.github.com/Netail), [@ronanru](https://redirect.github.com/ronanru), [@samcx](https://redirect.github.com/samcx), [@shuding](https://redirect.github.com/shuding), [@sokra](https://redirect.github.com/sokra), [@stylessh](https://redirect.github.com/stylessh), [@timfuhrmann](https://redirect.github.com/timfuhrmann), [@wbinnssmith](https://redirect.github.com/wbinnssmith), [@wyattjoh](https://redirect.github.com/wyattjoh), [@ypessoa](https://redirect.github.com/ypessoa), [@ztanner](https://redirect.github.com/ztanner) ### [`v14.2.7`](https://redirect.github.com/vercel/next.js/releases/tag/v14.2.7) [Compare Source](https://redirect.github.com/vercel/next.js/compare/v14.2.6...v14.2.7) > \[!NOTE]\ > This release is backporting bug fixes. It does **not** include all pending features/changes on canary. ##### Core Changes - Revert "chore: externalize undici for bundling" ([#65727](https://redirect.github.com/vercel/next.js/issues/65727)) - Refactor internal routing headers to use request meta ([#66987](https://redirect.github.com/vercel/next.js/issues/66987)) - fix(next): add cross origin in react dom preload ([#67423](https://redirect.github.com/vercel/next.js/issues/67423)) - build: upgrade edge-runtime ([#67565](https://redirect.github.com/vercel/next.js/issues/67565)) - GTM dataLayer parameter should take an object, not an array of strings ([#66339](https://redirect.github.com/vercel/next.js/issues/66339)) - fix: properly patch lockfile against swc bindings ([#66515](https://redirect.github.com/vercel/next.js/issues/66515)) - Add deployment id header for rsc payload if present ([#67255](https://redirect.github.com/vercel/next.js/issues/67255)) - Update font data ([#68639](https://redirect.github.com/vercel/next.js/issues/68639)) - fix i18n data pathname resolving ([#68947](https://redirect.github.com/vercel/next.js/issues/68947)) - pages router: ensure x-middleware-cache is respected ([#67734](https://redirect.github.com/vercel/next.js/issues/67734)) - Fix bad modRequest in flight entry manifest [#68888](https://redirect.github.com/vercel/next.js/issues/68888) - Reject next image urls in image optimizer [#68628](https://redirect.github.com/vercel/next.js/issues/68628) - Fix hmr assetPrefix escaping and reuse logic from other files [#67983](https://redirect.github.com/vercel/next.js/issues/67983) ##### Credits Huge thanks to [@kjugi](https://redirect.github.com/kjugi), [@huozhi](https://redirect.github.com/huozhi), [@ztanner](https://redirect.github.com/ztanner), [@SukkaW](https://redirect.github.com/SukkaW), [@marlier](https://redirect.github.com/marlier), [@Kikobeats](https://redirect.github.com/Kikobeats), [@syi0808](https://redirect.github.com/syi0808), [@ijjk](https://redirect.github.com/ijjk), and [@samcx](https://redirect.github.com/samcx) for helping! ### [`v14.2.6`](https://redirect.github.com/vercel/next.js/releases/tag/v14.2.6) [Compare Source](https://redirect.github.com/vercel/next.js/compare/v14.2.5...v14.2.6) > \[!NOTE]\ > This release is backporting bug fixes. It does **not** include all pending features/changes on canary. ##### Core Changes - Ensure fetch cache TTL is updated properly ([#69164](https://redirect.github.com/vercel/next.js/issues/69164))

jshemas/openGraphScraper (open-graph-scraper)

### [`v6.8.1`](https://redirect.github.com/jshemas/openGraphScraper/blob/HEAD/CHANGELOG.md#681) [Compare Source](https://redirect.github.com/jshemas/openGraphScraper/compare/5d9874dfe00d26295814fefad930655be4700678...98e7f2b4df0190823256d5c056e21959ad33ce22) - Fixing issue where setting `fetchOptions.headers` would replace the default `headers` - Updating dependencies ### [`v6.8.0`](https://redirect.github.com/jshemas/openGraphScraper/blob/HEAD/CHANGELOG.md#680) [Compare Source](https://redirect.github.com/jshemas/openGraphScraper/compare/573b7ee4249ae67fef122277c7de94f51377dd68...5d9874dfe00d26295814fefad930655be4700678) - Updating how `onlyGetOpenGraphInfo` works. By default it is `false` but now it accepts an array of properties for which no fallback should be used. - Updating how you get types `import { SuccessResult } from 'open-graph-scraper/types';`. See readme for details. - Updating dependencies

elad2412/the-new-css-reset (the-new-css-reset)

### [`v1.11.3`](https://redirect.github.com/elad2412/the-new-css-reset/compare/1f52db215aa16cc765f130287e6bf8cae1221f35...ee17cbf00ee50c18bce77888678bb2199c88ae73) [Compare Source](https://redirect.github.com/elad2412/the-new-css-reset/compare/1f52db215aa16cc765f130287e6bf8cae1221f35...ee17cbf00ee50c18bce77888678bb2199c88ae73)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

nissy-dev / blog

Update dependencies #324

Release Notes

Configuration

Edited/Blocked Notification