socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
| ⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|---|
| @sanity/plugin-kit@2.2.0 | 2.1.5...2.2.0 | None | +8/-9 |
stipsan |
| prettier-plugin-packagejson@2.4.3 | 2.3.0...2.4.3 | None | +20/-5 |
matzkoh |
| @sanity/pkg-utils@1.20.4 | 1.17.2...1.20.4 | None | +99/-86 |
stipsan |
| styled-components@5.3.11 | 5.3.6...5.3.11 | None | +7/-7 |
probablyup |
This PR contains the following updates:
1.17.2->1.20.42.1.5->2.2.02.3.0->2.4.35.3.6->5.3.11Release Notes
sanity-io/pkg-utils
### [`v1.20.4`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1204-httpsgithubcomsanity-iopkg-utilscomparev1203v1204-2022-12-16) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.20.3...v1.20.4) ##### Bug Fixes - build correct `PKG_FILE_PATH` env variable ([20d6dfb](https://togithub.com/sanity-io/pkg-utils/commit/20d6dfb5693ee865b54be1e2b8eb6875ae2195a7)) ### [`v1.20.3`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1203-httpsgithubcomsanity-iopkg-utilscomparev1202v1203-2022-12-09) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.20.2...v1.20.3) ##### Bug Fixes - prevent useless warnings ([d797edc](https://togithub.com/sanity-io/pkg-utils/commit/d797edccd8c72440a9fb4584c7b8f11aee5f08b3)) ### [`v1.20.2`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1202-httpsgithubcomsanity-iopkg-utilscomparev1201v1202-2022-12-01) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.20.1...v1.20.2) ##### Bug Fixes - refactor to `@rollup/plugin-terser` ([#12](https://togithub.com/sanity-io/pkg-utils/issues/12)) ([4bd427f](https://togithub.com/sanity-io/pkg-utils/commit/4bd427fece32097f826c31ae2c014ad1de0da9f8)) ### [`v1.20.1`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1201-httpsgithubcomsanity-iopkg-utilscomparev1200v1201-2022-11-27) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.20.0...v1.20.1) ##### Bug Fixes - remove shared browserlist config ([528c4d3](https://togithub.com/sanity-io/pkg-utils/commit/528c4d304e8b8f99d261a6b18c9df2900e502831)) ### [`v1.20.0`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1200-httpsgithubcomsanity-iopkg-utilscomparev1190v1200-2022-11-27) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.19.0...v1.20.0) ##### Features - share browserslist config ([7ae4424](https://togithub.com/sanity-io/pkg-utils/commit/7ae44248dbf24564715e73d3cc34afa4a72ff0b1)) ### [`v1.19.0`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1190-httpsgithubcomsanity-iopkg-utilscomparev1180v1190-2022-11-27) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.18.0...v1.19.0) ##### Features - export `DEFAULT_BROWSERSLIST_QUERY` ([5def2e2](https://togithub.com/sanity-io/pkg-utils/commit/5def2e20919584abc1484d5f3586ba01070f7689)) ### [`v1.18.0`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1180-httpsgithubcomsanity-iopkg-utilscomparev1173v1180-2022-11-08) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.17.3...v1.18.0) ##### Features - use recast for extracting declared modules ([719878f](https://togithub.com/sanity-io/pkg-utils/commit/719878f746ba2d6a5ccaf06f228a7ad5e218d480)) ### [`v1.17.3`](https://togithub.com/sanity-io/pkg-utils/blob/HEAD/CHANGELOG.md#1173-httpsgithubcomsanity-iopkg-utilscomparev1172v1173-2022-11-07) [Compare Source](https://togithub.com/sanity-io/pkg-utils/compare/v1.17.2...v1.17.3) ##### Bug Fixes - syntax error on multi-line declared modules ([2b4670d](https://togithub.com/sanity-io/pkg-utils/commit/2b4670d27b5f0cfcfe08ae3f9d35c46912bf2a79))sanity-io/plugin-kit
### [`v2.2.0`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#220-httpsgithubcomsanity-ioplugin-kitcomparev2119v220-2022-12-07) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.19...v2.2.0) ##### Features - added ui-workshop preset ([d9a1ec5](https://togithub.com/sanity-io/plugin-kit/commit/d9a1ec50659146d5df102a6ee6fe7d52abc36686)) ### [`v2.1.19`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2119-httpsgithubcomsanity-ioplugin-kitcomparev2118v2119-2022-12-01) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.18...v2.1.19) ##### Bug Fixes - **docs:** sanity dev instead of sanity start ([f068ad8](https://togithub.com/sanity-io/plugin-kit/commit/f068ad83d8dde680b04230dd65bffeecfc3b0259)) ### [`v2.1.18`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2118-httpsgithubcomsanity-ioplugin-kitcomparev2117v2118-2022-11-30) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.17...v2.1.18) ##### Bug Fixes - use sanity ^3.0.0 and [@sanity/ui](https://togithub.com/sanity/ui) ^1.0.0 for plugins ([9f2c6c6](https://togithub.com/sanity-io/plugin-kit/commit/9f2c6c65dda75d6d09639935609c391b3237fc57)) ### [`v2.1.17`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2117-httpsgithubcomsanity-ioplugin-kitcomparev2116v2117-2022-11-22) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.16...v2.1.17) ##### Bug Fixes - workflow manual trigger now includes branch name om run-name ([0596fdf](https://togithub.com/sanity-io/plugin-kit/commit/0596fdf850cedce588608b2c18fc400e29247efc)) ### [`v2.1.16`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2116-httpsgithubcomsanity-ioplugin-kitcomparev2115v2116-2022-11-16) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.15...v2.1.16) ##### Bug Fixes - **docs:** quickstart correction ([02a0fa4](https://togithub.com/sanity-io/plugin-kit/commit/02a0fa44ac104080df5aa0e79c6b66275cf1575c)) ### [`v2.1.15`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2115-httpsgithubcomsanity-ioplugin-kitcomparev2114v2115-2022-11-16) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.14...v2.1.15) ##### Bug Fixes - **docs:** added more details on inject command ([9f0d3ae](https://togithub.com/sanity-io/plugin-kit/commit/9f0d3ae1a8dedbb3c5c0f9443ac6088fe170b66c)) ### [`v2.1.14`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2114-httpsgithubcomsanity-ioplugin-kitcomparev2113v2114-2022-11-15) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.13...v2.1.14) ##### Bug Fixes - **deps:** update dependency get-it to v7 ([#28](https://togithub.com/sanity-io/plugin-kit/issues/28)) ([9928b10](https://togithub.com/sanity-io/plugin-kit/commit/9928b10aa42dc128b17c4eaae9fdae1a4a439ca1)) - **deps:** update dependency git-user-info to v2 ([#20](https://togithub.com/sanity-io/plugin-kit/issues/20)) ([71ea801](https://togithub.com/sanity-io/plugin-kit/commit/71ea80136c86e7875fdd8a3c6cffcf62b5ea388b)) - **deps:** update dependency npm-packlist to v7 ([#33](https://togithub.com/sanity-io/plugin-kit/issues/33)) ([bb883c8](https://togithub.com/sanity-io/plugin-kit/commit/bb883c836b8a5f81c26c873426337aaaf6edc4b3)) - **deps:** update dependency postcss to ^8.4.19 ([#45](https://togithub.com/sanity-io/plugin-kit/issues/45)) ([21a7c0c](https://togithub.com/sanity-io/plugin-kit/commit/21a7c0cca3fe96094cda188dfcebd07ed4dc46f8)) - **deps:** update dependency validate-npm-package-name to v5 ([#37](https://togithub.com/sanity-io/plugin-kit/issues/37)) ([4005536](https://togithub.com/sanity-io/plugin-kit/commit/40055360f5dafa6f802ba4145deeb626e98ba9cf)) - show correct yalc command for both npm and yarn ([47ac2a0](https://togithub.com/sanity-io/plugin-kit/commit/47ac2a0a54ba13ad71fe4dedbdd6a4b791e4c9ff)) - support how renovatebot generate lockfiles ([#47](https://togithub.com/sanity-io/plugin-kit/issues/47)) ([160e64b](https://togithub.com/sanity-io/plugin-kit/commit/160e64bba42fc0b61c5a1b6dd9de5072eeeeb719)) ### [`v2.1.13`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2113-httpsgithubcomsanity-ioplugin-kitcomparev2112v2113-2022-11-15) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.12...v2.1.13) ##### Bug Fixes - shortened the V3 banner and added it to init readme ([31757d7](https://togithub.com/sanity-io/plugin-kit/commit/31757d71d16e4a9c7536a857a01b3e52419f8cf1)) ### [`v2.1.12`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2112-httpsgithubcomsanity-ioplugin-kitcomparev2111v2112-2022-11-14) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.11...v2.1.12) ##### Bug Fixes - **docs:** made check secrets an explicit step in semver-workflow readme ([9315e14](https://togithub.com/sanity-io/plugin-kit/commit/9315e14f0a27cfa394528f43e721e6695df9be51)) - semver-workflow readme link ([f454246](https://togithub.com/sanity-io/plugin-kit/commit/f454246f4cb24fb8c92059f56c87270910ccadba)) ### [`v2.1.11`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2111-httpsgithubcomsanity-ioplugin-kitcomparev2110v2111-2022-11-14) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.10...v2.1.11) ##### Bug Fixes - made inject readme consider more things as matching ([33acfff](https://togithub.com/sanity-io/plugin-kit/commit/33acffffc9ce933b703999ad5cd283c1c27f635a)) ### [`v2.1.10`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#2110-httpsgithubcomsanity-ioplugin-kitcomparev219v2110-2022-11-14) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.9...v2.1.10) ##### Bug Fixes - link-watch now works when the watch directory does not exist on startup ([a4acd54](https://togithub.com/sanity-io/plugin-kit/commit/a4acd54800c7866e58f44dc1785fd151aa0350a2)) ### [`v2.1.9`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#219-httpsgithubcomsanity-ioplugin-kitcomparev218v219-2022-11-14) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.8...v2.1.9) ##### Bug Fixes - semver-workflow readme is now compatible with init ([95e8cba](https://togithub.com/sanity-io/plugin-kit/commit/95e8cba76582474271734f5e9259d9e5ce85acda)) ### [`v2.1.8`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#218-httpsgithubcomsanity-ioplugin-kitcomparev217v218-2022-11-07) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.7...v2.1.8) ##### Bug Fixes - **deps:** sanity 3.0.0-rc.1 ([aa2d619](https://togithub.com/sanity-io/plugin-kit/commit/aa2d6196dd3c20e26bee0f3f5df125d3a8d9cba3)) - **deps:** sanity 3.0.0-rc.2 ([345eaa8](https://togithub.com/sanity-io/plugin-kit/commit/345eaa8808e6ee158cb10c25f73e3337be8fff81)) ### [`v2.1.7`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#217-httpsgithubcomsanity-ioplugin-kitcomparev216v217-2022-11-04) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.6...v2.1.7) ##### Bug Fixes - workflow name based on inputs ([75c8932](https://togithub.com/sanity-io/plugin-kit/commit/75c89321c71025bf2de2c3911d58ad4b084c8dc3)) ### [`v2.1.6`](https://togithub.com/sanity-io/plugin-kit/blob/HEAD/CHANGELOG.md#216-httpsgithubcomsanity-ioplugin-kitcomparev215v216-2022-11-04) [Compare Source](https://togithub.com/sanity-io/plugin-kit/compare/v2.1.5...v2.1.6) ##### Bug Fixes - package.json is now part of exports ([9e0631a](https://togithub.com/sanity-io/plugin-kit/commit/9e0631af37b7e1c87945d5ae9fc82775c8eebe4c))matzkoh/prettier-plugin-packagejson
### [`v2.4.3`](https://togithub.com/matzkoh/prettier-plugin-packagejson/releases/tag/v2.4.3) [Compare Source](https://togithub.com/matzkoh/prettier-plugin-packagejson/compare/v2.4.2...v2.4.3) ##### Bug Fixes - **deps:** update dependency sort-package-json to v2.4.1 ([758ac0b](https://togithub.com/matzkoh/prettier-plugin-packagejson/commit/758ac0b0add272813371c475cab701018cb596dc)) ### [`v2.4.2`](https://togithub.com/matzkoh/prettier-plugin-packagejson/releases/tag/v2.4.2) [Compare Source](https://togithub.com/matzkoh/prettier-plugin-packagejson/compare/v2.4.1...v2.4.2) ##### Bug Fixes - **deps:** update dependency sort-package-json to v2.2.0 ([992edb8](https://togithub.com/matzkoh/prettier-plugin-packagejson/commit/992edb811329a105ebfcbfb42144d6d4743e44ed)) ### [`v2.4.1`](https://togithub.com/matzkoh/prettier-plugin-packagejson/releases/tag/v2.4.1) [Compare Source](https://togithub.com/matzkoh/prettier-plugin-packagejson/compare/v2.4.0...v2.4.1) ##### Bug Fixes - **deps:** update dependency synckit to v0.8.5 ([865931b](https://togithub.com/matzkoh/prettier-plugin-packagejson/commit/865931b91661c7bd3eff018c2d61693f6ef01850)) ### [`v2.4.0`](https://togithub.com/matzkoh/prettier-plugin-packagejson/releases/tag/v2.4.0) [Compare Source](https://togithub.com/matzkoh/prettier-plugin-packagejson/compare/v2.3.0...v2.4.0) ##### Features - bump sort-package-json to v2 ([0dfc9f5](https://togithub.com/matzkoh/prettier-plugin-packagejson/commit/0dfc9f58a2fec0f308fe29c1ee4f9056595e1eab))styled-components/styled-components
### [`v5.3.11`](https://togithub.com/styled-components/styled-components/releases/tag/v5.3.11) [Compare Source](https://togithub.com/styled-components/styled-components/compare/v5.3.10...v5.3.11) Removed use of the `useDebugValue` hook to rectify older React support. **Full Changelog**: https://github.com/styled-components/styled-components/compare/v5.3.10...v5.3.11 ### [`v5.3.10`](https://togithub.com/styled-components/styled-components/releases/tag/v5.3.10) [Compare Source](https://togithub.com/styled-components/styled-components/compare/v5.3.9...v5.3.10) #### What's Changed - fix: Do not add px to unitless CSS variables by [@Lazyuki](https://togithub.com/Lazyuki) in [https://github.com/styled-components/styled-components/pull/3975](https://togithub.com/styled-components/styled-components/pull/3975) **Full Changelog**: https://github.com/styled-components/styled-components/compare/v5.3.9...v5.3.10 ### [`v5.3.9`](https://togithub.com/styled-components/styled-components/releases/tag/v5.3.9) [Compare Source](https://togithub.com/styled-components/styled-components/compare/v5.3.8...v5.3.9) #### What's Changed - \[v5] Make styled components work when the Object prototype is frozen by [@jportner](https://togithub.com/jportner) in [https://github.com/styled-components/styled-components/pull/3964](https://togithub.com/styled-components/styled-components/pull/3964) **Full Changelog**: https://github.com/styled-components/styled-components/compare/v5.3.8...v5.3.9 ### [`v5.3.8`](https://togithub.com/styled-components/styled-components/releases/tag/v5.3.8) [Compare Source](https://togithub.com/styled-components/styled-components/compare/v5.3.7...v5.3.8) #### What's Changed fix(constants): rework process env guard **Full Changelog**: https://github.com/styled-components/styled-components/compare/v5.3.7-fixed...v5.3.8 ### [`v5.3.7`](https://togithub.com/styled-components/styled-components/compare/v5.3.6...v5.3.7) [Compare Source](https://togithub.com/styled-components/styled-components/compare/v5.3.6...v5.3.7)Configuration
📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate using a preset from