redwoodjs/redwood
### [`v4.3.1`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.3.1)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.3.0...v4.3.1)
##### Patch Release
This release fixes [https://github.com/redwoodjs/redwood/issues/7751](https://togithub.com/redwoodjs/redwood/issues/7751) where WebAuthn login wasn't prompted after scaffolding dbAuth:
- Update isSupported function of webauthn [#7778](https://togithub.com/redwoodjs/redwood/issues/7778) by [@Leon-Sam](https://togithub.com/Leon-Sam)
### [`v4.3.0`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.3.0)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.2.2...v4.3.0)
##### Changelog
##### Fixed
- deleteCacheKey() needs to include any global cache prefix [#7362](https://togithub.com/redwoodjs/redwood/issues/7362) by [@cannikin](https://togithub.com/cannikin)
##### Docs
- docs: fix typo in utility-types.md [#7746](https://togithub.com/redwoodjs/redwood/issues/7746) by [@Flouse](https://togithub.com/Flouse)
- Fix wrong cell file names in docs [#7763](https://togithub.com/redwoodjs/redwood/issues/7763) by [@razzeee](https://togithub.com/razzeee)
- (docs): Minor Docusaurus setup updates [#6381](https://togithub.com/redwoodjs/redwood/issues/6381) by [@dthyresson](https://togithub.com/dthyresson)
##### Core dependencies
- fix(deps): update prisma monorepo to v4.11.0 [#7717](https://togithub.com/redwoodjs/redwood/issues/7717)
- fix(deps): update dependency fastify to v4.14.1 [#7759](https://togithub.com/redwoodjs/redwood/issues/7759)
> **Note** Using msw (mock service worker)?
>
> In this release, we updated msw to v1 since we could handle it internally, but if you happen to be using msw standalone, refer to the simple type change we made here if you're running into errors: [https://github.com/redwoodjs/redwood/pull/7450](https://togithub.com/redwoodjs/redwood/pull/7450).
##### Dependencies
Click to see all upgraded dependencies
chore(deps): update dependency @envelop/testing to v5.0.6 #7673
chore(deps): update dependency @clerk/types to v3.28.1 #7652
chore(deps): update dependency @npmcli/arborist to v6.2.3 #7675
chore(deps): update dependency @replayio/playwright to v0.3.23 #7677
chore(deps): update dependency @types/uuid to v9.0.1 #7680
chore(deps): update babel monorepo #7692
chore(deps): update dependency @clerk/clerk-react to v4.11.6 #7655
fix(deps): update dependency core-js to v3.29.0 #7694
chore(deps): update dependency @playwright/test to v1.31.1 #7700
chore(deps): update dependency nx to v15.8.1 #7702
fix(deps): update dependency pino to v8.11.0 #7703
chore(deps): update dependency cypress to v12.7.0 #7701
chore(deps): update dependency @clerk/types to v3.28.3 #7706
fix(deps): update dependency vite to v4.1.4 #7711
fix(deps): update dependency babel-plugin-inline-react-svg to v2.0.2 #7710
fix(deps): update dependency @escape.tech/graphql-armor to v1.7.1 #7709
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.6 #7708
chore(deps): update dependency redis to v4.6.5 #7707
fix(deps): update dependency @envelop/core to v3.0.6 #7682
fix(deps): update prisma monorepo to v4.11.0 #7717
fix(deps): update dependency eslint to v8.35.0 #7716
fix(deps): update dependency ci-info to v3.8.0 #7715
fix(deps): update dependency @envelop/disable-introspection to v4.0.6 #7713
fix(deps): update dependency @envelop/depth-limit to v2.0.6 #7684
fix(deps): update dependency msw to v1 #7450
chore(deps): update dependency @nrwl/nx-cloud to v15.1.1 #7723
chore(deps): update dependency @clerk/types to v3.28.4 #7720
fix(deps): update typescript-eslint monorepo to v5.54.0 #7724
fix(deps): update dependency systeminformation to v5.17.12 #7722
fix(deps): update dependency @envelop/filter-operation-type to v4.0.6 #7721
chore(deps): update dependency supertokens-node to v13.1.2 #7714
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.7 #7725
fix(deps): update dependency @types/aws-lambda to v8.10.111 #7726
fix(deps): update dependency @types/node to v16.18.13 #7727
chore(deps): update dependency @clerk/clerk-react to v4.12.0 #7728
fix(deps): update dependency msw to v1.1.0 #7733
fix(deps): update dependency babel-plugin-polyfill-corejs3 to v0.7.1 #7732
fix(deps): update dependency webpack-bundle-analyzer to v4.8.0 #7735
chore(deps): update dependency zx to v7.2.0 #7731
chore(deps): update dependency @types/vscode to v1.76.0 #7729
chore(deps): update dependency @replayio/playwright to v0.3.24 #7738
chore(deps): update dependency @npmcli/arborist to v6.2.4 #7741
fix(deps): update dependency @types/node to v16.18.14 #7739
chore(deps): update dependency @playwright/test to v1.31.2 #7743
chore(deps): update dependency firebase to v9.17.2 #7744
chore(deps): update dependency @clerk/clerk-react to v4.12.1 #7747
chore(deps): update dependency @clerk/types to v3.28.5 #7748
chore(deps): update dependency esbuild to v0.17.11 #7749
chore(deps): update dependency nodemon to v2.0.21 #7750
chore(deps): update dependency nx to v15.8.5 #7752
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.8 #7753
fix(deps): update dependency @whatwg-node/fetch to v0.8.2 #7755
fix(deps): update dependency graphql-yoga to v3.7.2 #7756
fix(deps): update dependency qs to v6.11.1 #7766
fix(deps): update typescript-eslint monorepo to v5.54.1 #7767
fix(deps): update dependency fastify to v4.14.1 #7759
chore(deps): update dependency @clerk/clerk-react to v4.12.2 #7771
fix(deps): update graphql-tools monorepo #7769
fix(deps): update dependency eslint-config-prettier to v8.7.0 #7764
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.9 #7772
### [`v4.2.2`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.2.2)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.2.1...v4.2.2)
##### Patch Release
- Allow passing an array of auth decoders to createGraphQLHandler [#7685](https://togithub.com/redwoodjs/redwood/issues/7685) by [@Tobbe](https://togithub.com/Tobbe)
- fix(cli): disable rollbacks when using force [#7679](https://togithub.com/redwoodjs/redwood/issues/7679) by [@Josh-Walker-GM](https://togithub.com/Josh-Walker-GM)
### [`v4.2.1`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.2.1)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.2.0...v4.2.1)
### Patch Release
This release fixes [https://github.com/redwoodjs/redwood/issues/7691](https://togithub.com/redwoodjs/redwood/issues/7691) where the GraphQL server couldn't read various properties on the request object.
chore(deps): update dependency @envelop/types to v3.0.2 #7674
fix(deps): update dependency graphql-yoga to v3.7.0 #7695
### [`v4.2.0`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.2.0)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.4...v4.2.0)
##### Security Release for Redwood Apps Using Clerk
> **Note**
>
> You can skip this notice if you're not using Clerk as an auth provider.
We've made a security improvement to the `getCurrentUser` function in the [api-side Clerk auth template](https://togithub.com/redwoodjs/redwood/blob/3303ee74b956460caeaca2e5d1a233cc3b634204/packages/auth-providers/clerk/setup/src/templates/api/lib/auth.ts.template) (PR here: [https://github.com/redwoodjs/redwood/pull/7668](https://togithub.com/redwoodjs/redwood/pull/7668)). Existing projects using Clerk as an auth provider should run the codemod or make the changes manually.
In detail, with Clerk, [you can set `privateMetadata` on a user](https://clerk.dev/docs/users/user-metadata#private-metadata). (Note that you have to set data on this property via the Clerk API for there to be data there.) The template `getCurrentUser` was returning this data to the frontend by default, making it available to your frontend code when a user was logged in.
Clerk users should run this codemod:
```bash
npx @redwoodjs/codemods@canary update-clerk-get-current-user
```
Or make the changes manually:
```diff
// api/src/lib/auth.ts
export const getCurrentUser = async (
decoded,
/* eslint-disable-next-line @typescript-eslint/no-unused-vars */
{ token, type },
/* eslint-disable-next-line @typescript-eslint/no-unused-vars */
{ event, context }
) => {
if (!decoded) {
logger.warn('Missing decoded user')
return null
}
const { roles } = parseJWT({ decoded })
+ const { privateMetadata, ...userWithoutPrivateMetadata } = decoded
if (roles) {
- return { ...decoded, roles }
+ return { ...userWithoutPrivateMetadata, roles }
}
- return { ...decoded }
+ return { ...userWithoutPrivateMetadata }
}
```
##### Changelog
##### Features
- 7482/validators exclude include caseinsensitive [#7573](https://togithub.com/redwoodjs/redwood/issues/7573) by [@taivo](https://togithub.com/taivo)
##### Fixed
- fix(clerk): Remove privateMetadata property from getCurrentUser [#7668](https://togithub.com/redwoodjs/redwood/issues/7668) by [@anagstef](https://togithub.com/anagstef)
- Fix `yarn rw exec` to set nonzero exit code on error [#7660](https://togithub.com/redwoodjs/redwood/issues/7660) by [@rcrogers](https://togithub.com/rcrogers)
- Get rid of red squiggles in new lambda functions [#7640](https://togithub.com/redwoodjs/redwood/issues/7640) by [@Tobbe](https://togithub.com/Tobbe)
- Forms: Export EmptyAsValue [#7656](https://togithub.com/redwoodjs/redwood/issues/7656) by [@Tobbe](https://togithub.com/Tobbe)
##### Docs
- Update CORS docs to reflect Redwood 4 changes [#7627](https://togithub.com/redwoodjs/redwood/issues/7627) by [@schybo](https://togithub.com/schybo)
- fix(docs): typo in `GraphQL` docs [#7634](https://togithub.com/redwoodjs/redwood/issues/7634) by [@BlackHawkSigma](https://togithub.com/BlackHawkSigma)
- Fix the world's most minor typo (txs -> tsx) [#7658](https://togithub.com/redwoodjs/redwood/issues/7658) by [@CarlQLange](https://togithub.com/CarlQLange)
- Update useRequireAuth docs to v4 auth [#7646](https://togithub.com/redwoodjs/redwood/issues/7646) by [@Tobbe](https://togithub.com/Tobbe)
- Update directives.md [#7670](https://togithub.com/redwoodjs/redwood/issues/7670) by [@alirezaRaisSattari](https://togithub.com/alirezaRaisSattari)
##### Chore
- chore(deps): bump [@sideway/formula](https://togithub.com/sideway/formula) from 3.0.0 to 3.0.1 in /docs [#7593](https://togithub.com/redwoodjs/redwood/issues/7593) by [@dependabot](https://togithub.com/dependabot)
- chore(CI): CI telemetry checking [#7623](https://togithub.com/redwoodjs/redwood/issues/7623) by [@Josh-Walker-GM](https://togithub.com/Josh-Walker-GM)
##### Core dependencies
- fix(deps): update prisma monorepo to v4.10.1 [#7601](https://togithub.com/redwoodjs/redwood/issues/7601)
- fix(deps): update dependency fastify to v4.13.0 [#7604](https://togithub.com/redwoodjs/redwood/issues/7604)
##### Dependencies
Click to see all upgraded dependencies
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.1 #7589
chore(deps): update dependency supertokens-auth-react to v0.31.0 #7588
chore(deps): update dependency @clerk/clerk-react to v4.11.1 #7585
chore(deps): update dependency @replayio/playwright to v0.3.19 #7590
fix(deps): update prisma monorepo to v4.10.0 #7591
chore(deps): update dependency supertokens-node to v13 #7595
fix(deps): update typescript-eslint monorepo to v5.51.0 #7592
fix(deps): update prisma monorepo to v4.10.1 #7601
fix(deps): update dependency pino to v8.10.0 #7599
chore(deps): update dependency esbuild to v0.17.7 #7603
fix(deps): update dependency fastify to v4.13.0 #7604
fix(deps): update dependency @whatwg-node/fetch to v0.7.1 #7600
fix(deps): update dependency @whatwg-node/fetch to v0.8.1 #7609
fix(deps): update dependency @fastify/static to v6.9.0 #7610
fix(deps): update dependency react-player to v2.11.2 #7594
chore(deps): update dependency @replayio/playwright to v0.3.20 #7613
chore(deps): update dependency esbuild to v0.17.8 #7626
fix(deps): update dependency systeminformation to v5.17.9 #7622
fix(deps): update dependency eslint to v8.34.0 #7615
chore(deps): update dependency @clerk/types to v3.27.0 #7614
chore(deps): update dependency supertokens-node to v13.0.2 #7629
chore(deps): update dependency @types/vscode to v1.75.1 #7630
chore(deps): update dependency supertokens-auth-react to v0.31.1 #7628
chore(deps): update dependency @replayio/playwright to v0.3.21 #7643
chore(deps): update dependency @clerk/clerk-react to v4.11.3 #7642
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.3 #7645
chore(deps): update dependency lerna to v6.5.1 #7631
chore(deps): update dependency esbuild to v0.17.10 #7662
fix(deps): update dependency yargs to v17.7.1 #7667
fix(deps): update dependency @fastify/url-data to v5.3.1 #7665
fix(deps): update dependency vite to v4.1.3 #7664
fix(deps): update dependency @clerk/clerk-sdk-node to v4.7.4 #7663
fix(deps): update dependency core-js to v3.28.0 #7666
fix(deps): update dependency vscode-languageserver-types to v3.17.3 #7636
### [`v4.1.4`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.1.4)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.3...v4.1.4)
### Patch Release
- fix(telemetry): Avoid getConfig for CRWA [#7621](https://togithub.com/redwoodjs/redwood/issues/7621) by [@Josh-Walker-GM](https://togithub.com/Josh-Walker-GM)
- fix(generator): add dotAll to Router regex [#7605](https://togithub.com/redwoodjs/redwood/issues/7605) by [@jtoar](https://togithub.com/jtoar)
- fix(ts): Undo skipLibCheck change [#7633](https://togithub.com/redwoodjs/redwood/issues/7633) by [@dac09](https://togithub.com/dac09)
- fix(api): support building .jsx, .tsx files [#7638](https://togithub.com/redwoodjs/redwood/issues/7638) by [@jtoar](https://togithub.com/jtoar)
- fix:(webAuthn) use `globalThis`, not `process.env` [#7639](https://togithub.com/redwoodjs/redwood/issues/7639) by [@jtoar](https://togithub.com/jtoar)
#### Recommended changes to tsconfigs
> **Note**
>
> If you didn't create a project in the last week, this doesn't apply to you.
In `v4.1.0` we shipped with `skipLibCheck: true` in the tsconfig templates. If you created a new project in the last week, we recommend that you change this setting back to `false` in your `web/tsconfig.json` and `api/tsconfig.json` files:
```diff
{
"compilerOptions": {
"noEmit": true,
- "skipLibCheck": true,
+ "skipLibCheck": false,
```
Alternatively you can just run `yarn rw setup tsconfig --force`, which will replace your existing tsconfigs with the one from the latest template on our repo.
### [`v4.1.3`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.1.3)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.2...v4.1.3)
### Patch Release
- fix(vite): Respect `host`, `sourceMap` settings in redwood.toml on vite dev server [#7606](https://togithub.com/redwoodjs/redwood/issues/7606) by [@dac09](https://togithub.com/dac09)
- Reinforce the const-ness of notAuthenticatedState [#7607](https://togithub.com/redwoodjs/redwood/issues/7607) by [@Tobbe](https://togithub.com/Tobbe)
- Check if client has loaded before saying that loading is finished [#7608](https://togithub.com/redwoodjs/redwood/issues/7608) by [@Tobbe](https://togithub.com/Tobbe)
- chore(deps): update dependency [@clerk/clerk-react](https://togithub.com/clerk/clerk-react) to v4.11.2 [#7611](https://togithub.com/redwoodjs/redwood/issues/7611)
- fix(deps): update dependency [@clerk/clerk-sdk-node](https://togithub.com/clerk/clerk-sdk-node) to v4.7.2 [#7612](https://togithub.com/redwoodjs/redwood/issues/7612)
### [`v4.1.2`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.1.2)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.1...v4.1.2)
### Patch Release
- getDuplicateRoutes: Ignore redirects and other unnamed routes [#7564](https://togithub.com/redwoodjs/redwood/issues/7564) by [@Tobbe](https://togithub.com/Tobbe)
- Add back `buildType: nixpacks` per Flightcontrol request [#7598](https://togithub.com/redwoodjs/redwood/issues/7598) by [@schybo](https://togithub.com/schybo)
### [`v4.1.1`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.1.1)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.0...v4.1.1)
### Patch Release
- fix(auth): truly optional auth decoder [#7572](https://togithub.com/redwoodjs/redwood/issues/7572) by [@Tobbe](https://togithub.com/Tobbe)
### [`v4.1.0`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.1.0)
[Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.0.1...v4.1.0)
### Experimental Vite Support, SuperTokens, and Redwood-version Notifications
#### Experimental Vite Support
> **Note**
>
> This feature is experimental and will not follow SemVer.
This release features experimental support for using Vite as a bundler instead of Webpack:
yarn rw setup vite
See the announcement over on the forums: https://community.redwoodjs.com/t/guide-experimental-vite-support-in-redwood-v4-1-rc/4466.
#### SuperTokens
You can now setup SuperTokens as an auth provider:
yarn rw setup auth supertokens
Follow the walkthrough here: https://redwoodjs.com/docs/auth/supertokens.
#### Redwood-version Notifications
You can now opt in to receiving version updates for the version you're on. Add the following to your `redwood.toml` file:
```toml
[notifications]
versionUpdates = ['latest']
```
You can opt into receiving updates for "canary", "next", and "rc" as well:
```toml
[notifications]
versionUpdates = ['latest', 'canary', 'next', 'rc']
```
### Changelog
#### Features
- feat(vite): Add ability to switch Webpack for Vite on the web side [#6967](https://togithub.com/redwoodjs/redwood/issues/6967) by [@dac09](https://togithub.com/dac09)
- feat(dev): Enable restarting vite and typgen by typing "rs" [#7460](https://togithub.com/redwoodjs/redwood/issues/7460) by [@dac09](https://togithub.com/dac09)
- add skipLibCheck to web tsconfig [#7498](https://togithub.com/redwoodjs/redwood/issues/7498), add skipLibCheck to api tsconfig [#7499](https://togithub.com/redwoodjs/redwood/issues/7499) by [@dennemark](https://togithub.com/dennemark)
- Enable yarn rw setup auth supertokens [#7519](https://togithub.com/redwoodjs/redwood/issues/7519) by [@Tobbe](https://togithub.com/Tobbe)
- feat: add toml option for upgrade checks [#7162](https://togithub.com/redwoodjs/redwood/issues/7162) by [@jtoar](https://togithub.com/jtoar)
- feat(cli): Additional post upgrade messages [#7529](https://togithub.com/redwoodjs/redwood/issues/7529) by [@Josh-Walker-GM](https://togithub.com/Josh-Walker-GM)
#### Fixed
- Separate setup vite handler, install canary version of `@redwoodjs/vite` [#7294](https://togithub.com/redwoodjs/redwood/issues/7294) by [@jtoar](https://togithub.com/jtoar)
- fix(vite): Fix typo in setup process [#7311](https://togithub.com/redwoodjs/redwood/issues/7311) by [@dac09](https://togithub.com/dac09)
- fix(vite): Use process.env for env vars, Swap CommonJS plugin [#7339](https://togithub.com/redwoodjs/redwood/issues/7339) by [@dac09](https://togithub.com/dac09)
- SuperTokens: Update to work with v0.30 [#7490](https://togithub.com/redwoodjs/redwood/issues/7490) by [@Tobbe](https://togithub.com/Tobbe)
- Fix SuperTokens setup web template [#7526](https://togithub.com/redwoodjs/redwood/issues/7526) by [@Tobbe](https://togithub.com/Tobbe)
- fix(vite): Fix Vite entry point on windows [#7554](https://togithub.com/redwoodjs/redwood/issues/7554) by [@dac09](https://togithub.com/dac09)
- fix(auth): handle CRLFs in `yarn rw setup auth` [#7560](https://togithub.com/redwoodjs/redwood/issues/7560) by [@jtoar](https://togithub.com/jtoar)
- Fix validation types and tests [#7565](https://togithub.com/redwoodjs/redwood/issues/7565) by [@taivo](https://togithub.com/taivo)
- fix(vite): A few fixes for vite [#7576](https://togithub.com/redwoodjs/redwood/issues/7576) by [@dac09](https://togithub.com/dac09)
- fix(clerk): check if we're prerendering in Clerk client getter [#7551](https://togithub.com/redwoodjs/redwood/issues/7551) by [@jtoar](https://togithub.com/jtoar)
#### Docs
- SuperTokens docs [#7522](https://togithub.com/redwoodjs/redwood/issues/7522) by [@Tobbe](https://togithub.com/Tobbe)
- Clerk docs: Update to use new env vars [#7528](https://togithub.com/redwoodjs/redwood/issues/7528) by [@Tobbe](https://togithub.com/Tobbe)
- Docs: Add missing groupId to `` [#7547](https://togithub.com/redwoodjs/redwood/issues/7547) by [@Tobbe](https://togithub.com/Tobbe)
- Update cli-commands.md [#7511](https://togithub.com/redwoodjs/redwood/issues/7511) by [@Lucas-Bide](https://togithub.com/Lucas-Bide)
- Clerk docs updates, take 2 [#7544](https://togithub.com/redwoodjs/redwood/issues/7544) by [@Tobbe](https://togithub.com/Tobbe)
- fix(docs): finish custom auth docs on authDecoder [#7563](https://togithub.com/redwoodjs/redwood/issues/7563) by [@jtoar](https://togithub.com/jtoar)
#### Chore
- chore(vite): Small tweaks to Vite package [#7322](https://togithub.com/redwoodjs/redwood/issues/7322) by [@dac09](https://togithub.com/dac09)
- feat(vite): Switch build and dev to call Vite programatically [#7384](https://togithub.com/redwoodjs/redwood/issues/7384) by [@dac09](https://togithub.com/dac09)
- Revert part of "Fix premajor canary publishing when there's a major RC ([#7320](https://togithub.com/redwoodjs/redwood/issues/7320))" [#7510](https://togithub.com/redwoodjs/redwood/issues/7510) by [@jtoar](https://togithub.com/jtoar)
- chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 in /docs [#7539](https://togithub.com/redwoodjs/redwood/issues/7539) by [@dependabot](https://togithub.com/dependabot)
- chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 in /**fixtures**/example-todo-main [#7540](https://togithub.com/redwoodjs/redwood/issues/7540) by [@dependabot](https://togithub.com/dependabot)
- chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 [#7541](https://togithub.com/redwoodjs/redwood/issues/7541) by [@dependabot](https://togithub.com/dependabot)
- feat(telemetry): Capture bundler flag [#7536](https://togithub.com/redwoodjs/redwood/issues/7536) by [@dac09](https://togithub.com/dac09)
- Set.tsx: Improve code comments [#7577](https://togithub.com/redwoodjs/redwood/issues/7577) by [@Tobbe](https://togithub.com/Tobbe)
#### Core dependencies
- chore(deps): update yarn to v3.4.1 [#7530](https://togithub.com/redwoodjs/redwood/issues/7530)
#### Dependencies
Click to see all upgraded dependencies
fix(deps): update dependency vite to v4.0.4 #7306
fix(deps): update dependency @vitejs/plugin-react to v3.0.1 #7301
fix(deps): update dependency @whatwg-node/fetch to v0.6.5 #7507
chore(deps): update dependency typescript to v4.9.5 #7509
chore(deps): update dependency redis to v4.6.4 #7506
chore(deps): update dependency @nrwl/nx-cloud to v15.0.3 #7508
chore(deps): update dependency @tsd/typescript to v4.9.5 #7512
chore(deps): update dependency @types/yargs to v17.0.21 #7513
fix(deps): update dependency graphql-yoga to v3.4.1 #7515
chore(deps): update dependency @types/yargs to v17.0.22 #7514
fix(deps): update typescript-eslint monorepo to v5.50.0 #7516
chore(deps): update dependency cypress to v12.5.0 #7521
fix(deps): update dependency graphql-yoga to v3.5.1 #7531
chore(deps): update dependency @clerk/clerk-react to v4.10.0 #7533
fix(deps): update graphql-tools monorepo #7534
chore(deps): update dependency @clerk/types to v3.25.1 #7532
chore(deps): update dependency @npmcli/arborist to v6.2.1 #7535
fix(deps): update dependency vite to v4.1.1 #7543
fix(deps): update dependency @vitejs/plugin-react to v3.1.0 #7542
chore(deps): update dependency @types/vscode to v1.74.1 #7548
chore(deps): update dependency @replayio/playwright to v0.3.17 #7546
chore(deps): update yarn to v3.4.1 #7530
fix(deps): update dependency @babel/parser to v7.20.15 #7550
chore(deps): update dependency cypress to v12.5.1 #7549
fix(deps): update dependency @clerk/clerk-sdk-node to v4.6.6 #7552
chore(deps): update dependency firebase to v9.17.0 #7553
fix(deps): update dependency @whatwg-node/fetch to v0.6.6 #7559
fix(deps): update docusaurus monorepo to v2.3.0 #7475
This PR contains the following updates:
4.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.14.0.1->4.3.1Release Notes
redwoodjs/redwood
### [`v4.3.1`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.3.1) [Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.3.0...v4.3.1) ##### Patch Release This release fixes [https://github.com/redwoodjs/redwood/issues/7751](https://togithub.com/redwoodjs/redwood/issues/7751) where WebAuthn login wasn't prompted after scaffolding dbAuth: - Update isSupported function of webauthn [#7778](https://togithub.com/redwoodjs/redwood/issues/7778) by [@Leon-Sam](https://togithub.com/Leon-Sam) ### [`v4.3.0`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.3.0) [Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.2.2...v4.3.0) ##### Changelog ##### Fixed - deleteCacheKey() needs to include any global cache prefix [#7362](https://togithub.com/redwoodjs/redwood/issues/7362) by [@cannikin](https://togithub.com/cannikin) ##### Docs - docs: fix typo in utility-types.md [#7746](https://togithub.com/redwoodjs/redwood/issues/7746) by [@Flouse](https://togithub.com/Flouse) - Fix wrong cell file names in docs [#7763](https://togithub.com/redwoodjs/redwood/issues/7763) by [@razzeee](https://togithub.com/razzeee) - (docs): Minor Docusaurus setup updates [#6381](https://togithub.com/redwoodjs/redwood/issues/6381) by [@dthyresson](https://togithub.com/dthyresson) ##### Core dependencies - fix(deps): update prisma monorepo to v4.11.0 [#7717](https://togithub.com/redwoodjs/redwood/issues/7717) - fix(deps): update dependency fastify to v4.14.1 [#7759](https://togithub.com/redwoodjs/redwood/issues/7759) > **Note** Using msw (mock service worker)? > > In this release, we updated msw to v1 since we could handle it internally, but if you happen to be using msw standalone, refer to the simple type change we made here if you're running into errors: [https://github.com/redwoodjs/redwood/pull/7450](https://togithub.com/redwoodjs/redwood/pull/7450). ##### DependenciesClick to see all upgraded dependencies
- chore(deps): update dependency @envelop/types to v3.0.2 #7674
- fix(deps): update dependency graphql-yoga to v3.7.0 #7695
### [`v4.2.0`](https://togithub.com/redwoodjs/redwood/releases/tag/v4.2.0) [Compare Source](https://togithub.com/redwoodjs/redwood/compare/v4.1.4...v4.2.0) ##### Security Release for Redwood Apps Using Clerk > **Note** > > You can skip this notice if you're not using Clerk as an auth provider. We've made a security improvement to the `getCurrentUser` function in the [api-side Clerk auth template](https://togithub.com/redwoodjs/redwood/blob/3303ee74b956460caeaca2e5d1a233cc3b634204/packages/auth-providers/clerk/setup/src/templates/api/lib/auth.ts.template) (PR here: [https://github.com/redwoodjs/redwood/pull/7668](https://togithub.com/redwoodjs/redwood/pull/7668)). Existing projects using Clerk as an auth provider should run the codemod or make the changes manually. In detail, with Clerk, [you can set `privateMetadata` on a user](https://clerk.dev/docs/users/user-metadata#private-metadata). (Note that you have to set data on this property via the Clerk API for there to be data there.) The template `getCurrentUser` was returning this data to the frontend by default, making it available to your frontend code when a user was logged in. Clerk users should run this codemod: ```bash npx @redwoodjs/codemods@canary update-clerk-get-current-user ``` Or make the changes manually: ```diff // api/src/lib/auth.ts export const getCurrentUser = async ( decoded, /* eslint-disable-next-line @typescript-eslint/no-unused-vars */ { token, type }, /* eslint-disable-next-line @typescript-eslint/no-unused-vars */ { event, context } ) => { if (!decoded) { logger.warn('Missing decoded user') return null } const { roles } = parseJWT({ decoded }) + const { privateMetadata, ...userWithoutPrivateMetadata } = decoded if (roles) { - return { ...decoded, roles } + return { ...userWithoutPrivateMetadata, roles } } - return { ...decoded } + return { ...userWithoutPrivateMetadata } } ``` ##### Changelog ##### Features - 7482/validators exclude include caseinsensitive [#7573](https://togithub.com/redwoodjs/redwood/issues/7573) by [@taivo](https://togithub.com/taivo) ##### Fixed - fix(clerk): Remove privateMetadata property from getCurrentUser [#7668](https://togithub.com/redwoodjs/redwood/issues/7668) by [@anagstef](https://togithub.com/anagstef) - Fix `yarn rw exec` to set nonzero exit code on error [#7660](https://togithub.com/redwoodjs/redwood/issues/7660) by [@rcrogers](https://togithub.com/rcrogers) - Get rid of red squiggles in new lambda functions [#7640](https://togithub.com/redwoodjs/redwood/issues/7640) by [@Tobbe](https://togithub.com/Tobbe) - Forms: Export EmptyAsValue [#7656](https://togithub.com/redwoodjs/redwood/issues/7656) by [@Tobbe](https://togithub.com/Tobbe) ##### Docs - Update CORS docs to reflect Redwood 4 changes [#7627](https://togithub.com/redwoodjs/redwood/issues/7627) by [@schybo](https://togithub.com/schybo) - fix(docs): typo in `GraphQL` docs [#7634](https://togithub.com/redwoodjs/redwood/issues/7634) by [@BlackHawkSigma](https://togithub.com/BlackHawkSigma) - Fix the world's most minor typo (txs -> tsx) [#7658](https://togithub.com/redwoodjs/redwood/issues/7658) by [@CarlQLange](https://togithub.com/CarlQLange) - Update useRequireAuth docs to v4 auth [#7646](https://togithub.com/redwoodjs/redwood/issues/7646) by [@Tobbe](https://togithub.com/Tobbe) - Update directives.md [#7670](https://togithub.com/redwoodjs/redwood/issues/7670) by [@alirezaRaisSattari](https://togithub.com/alirezaRaisSattari) ##### Chore - chore(deps): bump [@sideway/formula](https://togithub.com/sideway/formula) from 3.0.0 to 3.0.1 in /docs [#7593](https://togithub.com/redwoodjs/redwood/issues/7593) by [@dependabot](https://togithub.com/dependabot) - chore(CI): CI telemetry checking [#7623](https://togithub.com/redwoodjs/redwood/issues/7623) by [@Josh-Walker-GM](https://togithub.com/Josh-Walker-GM) ##### Core dependencies - fix(deps): update prisma monorepo to v4.10.1 [#7601](https://togithub.com/redwoodjs/redwood/issues/7601) - fix(deps): update dependency fastify to v4.13.0 [#7604](https://togithub.com/redwoodjs/redwood/issues/7604) ##### DependenciesClick to see all upgraded dependencies
Click to see all upgraded dependencies
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.