Closed renovate[bot] closed 1 year ago
vercel[bot]
commented
1 year ago The latest updates on your projects. Learn more about Vercel for Git ↗︎
| Name | Status | Preview | Comments | Updated (UTC) |
|---|---|---|---|---|
| sanity-template-vercel-visual-editing | ✅ Ready (Inspect) | Visit Preview | 💬 Add feedback | May 15, 2023 1:59am |
socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
@SocketSecurity ignore next@13.4.2This package contains telemetry which tracks you.
| Package | Note | Source |
|---|---|---|
| next@13.4.2 (added) | Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1 | package-lock.json, package.json via next-google-fonts@2.2.0, next-sanity@4.3.2 |
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ⚠️ 1 issue |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
| ➕ Added Package | Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|
| next@13.4.2 | eval, network, filesystem, shell, environment | +16 |
vercel-release-bot |
| ⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|---|
| @next/font@13.4.2 | 13.4.1...13.4.2 | None | +0/-0 |
vercel-release-bot |
stipsan
commented
1 year ago @SocketSecurity ignore next@13.4.2
This PR contains the following updates:
13.4.1->13.4.213.4.1->13.4.2Release Notes
vercel/next.js
### [`v13.4.2`](https://togithub.com/vercel/next.js/releases/tag/v13.4.2) [Compare Source](https://togithub.com/vercel/next.js/compare/v13.4.1...v13.4.2) ##### Core Changes - make sure server component externals only apply to files resolvable by node: [#49147](https://togithub.com/vercel/next.js/issues/49147) - Fix link not being GC'd sometimes: [#49318](https://togithub.com/vercel/next.js/issues/49318) - Fix issue where nextP is not replaced in searchParams: [#49315](https://togithub.com/vercel/next.js/issues/49315) - Add typescript version to next-info: [#49346](https://togithub.com/vercel/next.js/issues/49346) - Upgrade React to 18.3.0-canary-16d053d59-20230506: [#49402](https://togithub.com/vercel/next.js/issues/49402) - Remove empty config warning: [#49435](https://togithub.com/vercel/next.js/issues/49435) - app-router: add startTransition call to revalidate dispatcher: [#49453](https://togithub.com/vercel/next.js/issues/49453) - Inline static data buffer instead of using fs read: [#49323](https://togithub.com/vercel/next.js/issues/49323) - Revert "Temporarily disable app dir export integration test": [#49311](https://togithub.com/vercel/next.js/issues/49311) - Add link to Server Actions docs.: [#49384](https://togithub.com/vercel/next.js/issues/49384) - Replace metadata clone with custom handler in dev: [#49343](https://togithub.com/vercel/next.js/issues/49343) - Add request-async-storage to the shared layer: [#49470](https://togithub.com/vercel/next.js/issues/49470) - Fix revalidate: false detection in app: [#49473](https://togithub.com/vercel/next.js/issues/49473) - Fix metadata image route encoding: [#49482](https://togithub.com/vercel/next.js/issues/49482) - Fix actions redirect handling: [#49483](https://togithub.com/vercel/next.js/issues/49483) - Restrict `useOptimistic` and `useFormStatus` APIs on the server layer: [#49331](https://togithub.com/vercel/next.js/issues/49331) - Fix external rewrite with body: [#49487](https://togithub.com/vercel/next.js/issues/49487) - fix: better error message with an invalid assetPrefix: [#49403](https://togithub.com/vercel/next.js/issues/49403) - Fix Node Crypto polyfill: [#49288](https://togithub.com/vercel/next.js/issues/49288) - Fix: Router.query contains \_next when using middleware with dynamic routes: [#48753](https://togithub.com/vercel/next.js/issues/48753) - type: update React.CSSProperties type to Record: [#49186](https://togithub.com/vercel/next.js/issues/49186) - Fix server CSS imports and HMR not working properly in specific conditions: [#49462](https://togithub.com/vercel/next.js/issues/49462) - Fix HMR support for server layer imported SASS and SCSS: [#49534](https://togithub.com/vercel/next.js/issues/49534) - Support `.bind` syntax with Action functions: [#49422](https://togithub.com/vercel/next.js/issues/49422) - ci(test): enable turbopack test: [#49466](https://togithub.com/vercel/next.js/issues/49466) - feat(next-core): relay transform plugin: [#48899](https://togithub.com/vercel/next.js/issues/48899) - Fix canonical url for dynamic routes: [#49512](https://togithub.com/vercel/next.js/issues/49512) - Add experimental compile/generate handling: [#49491](https://togithub.com/vercel/next.js/issues/49491) - chore: cross-platform `rm -rf` script: [#49529](https://togithub.com/vercel/next.js/issues/49529) - refactor(next-core): remove ast cloning in custom transform: [#49560](https://togithub.com/vercel/next.js/issues/49560) - fix: a11y issues in react-dev-overlay: [#49460](https://togithub.com/vercel/next.js/issues/49460) - Add tests for HMR: [#49206](https://togithub.com/vercel/next.js/issues/49206) - Add stub Route type for typedRoutes: [#48099](https://togithub.com/vercel/next.js/issues/48099) - Add test for appdir referenced images: [#49242](https://togithub.com/vercel/next.js/issues/49242) - feat: Allow trace-level logging for non-published release builds: [#49564](https://togithub.com/vercel/next.js/issues/49564) - Fix unexpected object mutation while resolving Open Graph: [#49514](https://togithub.com/vercel/next.js/issues/49514) - actions: forward fetch rejections to the action handler: [#49577](https://togithub.com/vercel/next.js/issues/49577) - actions: make cookies.set revalidate: [#49582](https://togithub.com/vercel/next.js/issues/49582) - interception route: fix route groups breaking the referrer computation: [#49602](https://togithub.com/vercel/next.js/issues/49602) - Allow export decl with any init value in the actions compiler: [#49600](https://togithub.com/vercel/next.js/issues/49600) - Handle unstable_cache in pages: [#49624](https://togithub.com/vercel/next.js/issues/49624) - Update cache method handling during build: [#49633](https://togithub.com/vercel/next.js/issues/49633) - Fix fetchCache and no-store handling: [#49638](https://togithub.com/vercel/next.js/issues/49638) - interception routes: fix rewrites order: [#49615](https://togithub.com/vercel/next.js/issues/49615) - Ensure initialHeaders are normalized: [#49643](https://togithub.com/vercel/next.js/issues/49643) - app-router: add support for parallel routes in useParams: [#49595](https://togithub.com/vercel/next.js/issues/49595) - Add puppeteer to external packages list: [#49597](https://togithub.com/vercel/next.js/issues/49597) - Add playwright to external package list: [#49649](https://togithub.com/vercel/next.js/issues/49649) - actions: fill prefetchCache with revalidation payload: [#49576](https://togithub.com/vercel/next.js/issues/49576) - Rename Turbopack/tasks crates to common prefixes: [#49446](https://togithub.com/vercel/next.js/issues/49446) - chore(jest): Simplify isServer expression: [#48330](https://togithub.com/vercel/next.js/issues/48330) - Add missing config vars into Webpack cache key: [#49663](https://togithub.com/vercel/next.js/issues/49663) - misc: Apply PR comments from [#49206](https://togithub.com/vercel/next.js/issues/49206): [#49647](https://togithub.com/vercel/next.js/issues/49647) - fix: Standalone node http server starts accepting requests before next handler is ready: [#49548](https://togithub.com/vercel/next.js/issues/49548) - Update links from beta to stable docs.: [#49349](https://togithub.com/vercel/next.js/issues/49349) ##### Documentation Changes - Fix error message about `preconnect` 📝: [#40360](https://togithub.com/vercel/next.js/issues/40360) - \[docs] Add iOS hydration mismatch details to error page: [#43584](https://togithub.com/vercel/next.js/issues/43584) - Add note about custom distDir to standalone build docs: [#48592](https://togithub.com/vercel/next.js/issues/48592) - Add `--use-yarn` flag to `create-next-app`: [#49407](https://togithub.com/vercel/next.js/issues/49407) ##### Misc Changes - Add test case for client sourcemaps: [#49308](https://togithub.com/vercel/next.js/issues/49308) - Update start release workflow inputs: [#49492](https://togithub.com/vercel/next.js/issues/49492) - Fix failing actions e2e deploy test: [#49497](https://togithub.com/vercel/next.js/issues/49497) - Replace var with const: [#49379](https://togithub.com/vercel/next.js/issues/49379) - test: pages react version with react hook in deployment: [#48907](https://togithub.com/vercel/next.js/issues/48907) - Add test case for [#49235](https://togithub.com/vercel/next.js/issues/49235): [#49488](https://togithub.com/vercel/next.js/issues/49488) - chore: fix flaky middleware matcher test: [#49555](https://togithub.com/vercel/next.js/issues/49555) - Avoid skipping the required Test Codemods job: [#49589](https://togithub.com/vercel/next.js/issues/49589) - Update flakey app-actions deploy tests: [#49667](https://togithub.com/vercel/next.js/issues/49667) ##### Credits Huge thanks to [@shuding](https://togithub.com/shuding), [@ijjk](https://togithub.com/ijjk), [@ForsakenHarmony](https://togithub.com/ForsakenHarmony), [@timneutkens](https://togithub.com/timneutkens), [@huozhi](https://togithub.com/huozhi), [@sanjaiyan-dev](https://togithub.com/sanjaiyan-dev), [@acdlite](https://togithub.com/acdlite), [@feedthejim](https://togithub.com/feedthejim), [@styfle](https://togithub.com/styfle), [@leerob](https://togithub.com/leerob), [@koba04](https://togithub.com/koba04), [@g12i](https://togithub.com/g12i), [@cesarkohl](https://togithub.com/cesarkohl), [@darshkpatel](https://togithub.com/darshkpatel), [@josh](https://togithub.com/josh), [@li-jia-nan](https://togithub.com/li-jia-nan), [@kwonoj](https://togithub.com/kwonoj), [@gabschne](https://togithub.com/gabschne), [@alexkirsz](https://togithub.com/alexkirsz), [@karlhorky](https://togithub.com/karlhorky), [@jridgewell](https://togithub.com/jridgewell), [@sokra](https://togithub.com/sokra), [@kdy1](https://togithub.com/kdy1), [@akd-io](https://togithub.com/akd-io), [@runjuu](https://togithub.com/runjuu), [@jocarrd](https://togithub.com/jocarrd), [@nnnnoel](https://togithub.com/nnnnoel), and [@ferdingler](https://togithub.com/ferdingler) for helping!Configuration
📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate using a preset from