Open greenkeeper[bot] opened 4 years ago
After pinning to 9.3.1 your tests are still failing. The reported issue might not affect your project. These imprecisions are caused by inconsistent test results.
devDependency
next was updated from 9.3.2
to 9.3.3
.Your tests are still failing with this version. Compare changes
Huge thanks to @bgoerdt, @herrstucki, @MichelleLucero, @liulanz, @sdhani, @JazibJafri, @ElForastero, @moeyashi, @Andarist, @comxd, @chislee0708, and @PullJosh for helping!
The new version differs by 18 commits.
b5d8660
v9.3.3
ac223e2
v9.3.3-canary.0
dd098ca
Merge branch 'canary' of github.com:zeit/next.js into canary
e4bf0d4
Fix small punctuation issue (#11439)
a553768
Typos fixed: overriden --> overridden and innaccurate -->inacc… (#11454)
d3d0b93
Fix type ignore (#11479)
6f27e21
Fix #11396 (#11397)
fc94605
Update emotion dependencies in with-emotion-11 (#11414)
41764b2
Update .gitignore (#11421)
8d63330
Change mdx options description (#11409)
9e2ae69
Update api-rest-example to SSG (#11362)
48650a7
Fix with-aphrodite readme typo (#11436)
39a70d8
Minor change in README.md (#11434)
2b818a1
fixed typo: libraray -> library (#11435)
8fdc13a
Add support for comments in tsconfig.json (#11392)
There are 18 commits in total.
See the full diff
devDependency
next was updated from 9.3.3
to 9.3.4
.Your tests are still failing with this version. Compare changes
Huge thanks to @ijjk, @shYkiSto, @guybedford, @timneutkens, @alfrejivi, @IAmMorrow, and @wongmjane for helping!
The new version differs by 67 commits.
8c899ee
v9.3.4
e000d84
v9.3.4-canary.4
7b546a9
Update hello-world example React version & name for CodeSandbox (#11550)
a37ad0a
Add notes to styled-components example README (#11540)
a992444
v9.3.4-canary.3
3f6bd47
Update build output with renamed column (#11401)
1992e2a
Example/update unstated (#11534)
d61eced
Update to make sure AMP only bundles are always removed in pro… (#11527)
fa5da6d
Remove passing of NODE_OPTIONS='--inspect' to subprocesses (#11041)
f9cd7c5
v9.3.4-canary.2
c17ee73
Generic Type for GetStaticPaths (#11430)
2263876
added "with-route-as-modal" example (#11473)
f2315ff
update auth0 example with getServerSideProps (#11051)
b307ed9
Update checking for existing dotenv usage (#11496)
b8d075e
Update environment support (#11524)
There are 67 commits in total.
See the full diff
devDependency
next was updated from 9.3.4
to 9.3.5
.Your tests are still failing with this version. Compare changes
jsx
to list of supported files in docs: #11579<iframe>
: #11638as
prop: #11114node-promisepipe
library: #11700SERVER_PROPS_EXPORT_ERROR
constant: #11749ci-info
: #11758next-server
from Server Builds: #11819functional component
-> function component
: #11850Huge thanks to @mattcarlotta, @devknoll, @kvoncode, @sw-yx, @tsriram, @ijjk, @djanda97, @lfades, @janpio, @noejon, @jansepke, @janicklas-ralph, @asotoglez, @TalAter, @kandros, @scull7, @chibicode, @fabianishere, @PaulPCIO, @mjziolko, @ykzts, @yossisp, @karlhorky, @vassbence, @bduffany, @matamatanot, @lifeiscontent, @joeytepp, @kkobiela, @zfben, @mottox2, @viztor, @vvo, @merelinguist, @zackkrida, @sdhani, @stigkj, @agarwalrounak, @timneutkens, @armujahid, @Timer, @liulanz, @NMinhNguyen, @davecardwell, @MicrochipQ, @a14m, @housseindjirdeh, @hoangvvo, and @Fonger for helping!
The new version differs by 123 commits.
c0724ca
v9.3.5
df1e548
v9.3.5-canary.13
ffa4089
Update with-redux-thunk example to include HMR (#11816)
682120b
v9.3.5-canary.12
5248e18
fix(export): fallback to empty string for basePath (#11880)
ab18c79
Add support for params in header key/values (#10324)
b1aa594
Handle Potential Promise Rejection in Serverless (#11882)
d1b987f
v9.3.5-canary.11
841cd6c
Fix Situation Where Build Can Hang Indefinitely (#11881)
4e6d6d2
Remove unused import (#11875)
4094dfe
Remove with-cookie-auth (#11865)
5713bcb
v9.3.5-canary.10
f0422f2
Revert "minor change in hello-world/package.json" (#11874)
d3e308a
Add basePath in link component and add/remove it consistently (#9988)
0b51b23
Add stats config for load tests (#11868)
There are 123 commits in total.
See the full diff
devDependency
next was updated from 9.3.5
to 9.3.6
.Your tests are still failing with this version. Compare changes
module.hot.invalidate()
to webpack HMR: #12038terser-webpack-plugin
for Webpack 5: #11922next build
output.: #12034Huge thanks to @ijjk, @vvo, @gndelia, @sparkertime, @Timer, @lfades, @pjaws, @timneutkens, @vcapretz, @justincy, @dvaJi, @bhaskarmurthy, @agarwalrounak, @coktopus, @leerob, @yangshun, @Talbot3, @jamesmosier, @oddnavy, @StarpTech, @bduffany, @Fonger, @matamatanot, @dzigg, @thomasheyenbrock, @qWici, @styfle, @Oxicode, @seanli, @Kiarash-Z, @coetry, @sdhani, @rokinsky, @Dashue, @giovannigiordano, @chibicode, @Arthie, and @andrewkfiedler for helping!
The new version differs by 109 commits.
e6424fe
v9.3.6
bcd9b77
v9.3.6-canary.16
5936cbb
Update built-in-css-support.md (#12268)
9482bfb
Downgrade node-notifier to fix Azure tests (#12261)
e40f8ff
v9.3.6-canary.15
5268669
Add namedRegex and routeKeys to routes manifest (#12250)
af33ebc
Fix ncc'd version of terser not being used by terser webpack plugin (#12252)
f080931
v9.3.6-canary.14
937884b
Fix CSS Identifier Cleaning (#12239)
04f3d94
v9.3.6-canary.13
c72143d
Update size-limit to reflect Terser downgrade
718d6a4
v9.3.6-canary.12
3094016
Downgrade terser to fix invalid minifying (#12178)
6ce3c7b
Update node-notifier (#12205)
9b8a9de
Fix basePath not being applied for GS(S)P data routes (#12200)
There are 109 commits in total.
See the full diff
devDependency
next was updated from 9.3.6
to 9.4.0
.Your tests are still failing with this version. Compare changes
role=link
should open on [Enter]: #12460@babel/preset-typescript
to be configured: #11840source-map
package: #12355lerna.json
: 93a94b8.amp
to pathname: #12528moduleId
not resolving correctly on Windows: #12584react-refresh
for SC: #12627Huge thanks to @jamespohalloran, @lfades, @aemiro-allison, @ijjk, @taylorbryant, @Timer, @ykzts, @plug-n-play, @fabianishere, @vvo, @matamatanot, @chibicode, @karlhorky, @christianalfoni, @sangotaro, @liulanz, @dalibor-123, @stefanjudis, @Kiarash-Z, @hossam-magdy, @mit123suki, @robinweser, @lncls, @kohchihao, @connormcwood, @davidcsally, @roniemeque, @piyu-sh, @jonespen, @joemccann, @makezi, @TxHawks, @devknoll, @jokester, @piglovesyou, @austinhumes-valtech, @rafaelalmeidatk, @arcanis, @timneutkens, @mlorthiois, @huozhi, @lachlanjc, @sebastianbenz, @AlexanderVishnevsky, @mxschmitt, @janicklas-ralph, @NavizDev, @PabloSzx, @tywmick, @lwz7512, @justincy, @Skn0tt, @eps1lon, @maxigimenez, @sarupbanskota, @belgattitude, and @dpyzo0o for helping!
The new version differs by 155 commits.
6d1167e
v9.4.0
f9e24ab
v9.3.7-canary.21
7cca2b0
Add test for API route with fetch polyfill (#12680)
29b1100
fix logout in with-iron-session example (#12704)
653098d
Use @/ to show module alias instead of @ prefixed (#12600)
0b36211
[Docs] Environment Variables (#12696)
4acad75
Link Made by Vercel to vercel.com (#12702)
0900d57
v9.3.7-canary.20
467b2c7
Enable sassOptions support in next.config.js (#12685)
e3aeb2f
Update code sample in performance measurement docs (#12690)
f0220e6
[Examples] Update firebase authentication (#12687)
565e111
v9.3.7-canary.19
8b51e00
Upgrade deps (#12700)
ae1daea
Enable Fast Refresh by Default (#12640)
0bc0760
chore(next): link/router/document missing types (#12692)
There are 155 commits in total.
See the full diff
devDependency
next was updated from 9.4.0
to 9.4.1
.Your tests are still failing with this version. Compare changes
The new version differs by 60 commits.
ca372a9
v9.4.1
d5d9013
v9.4.1-canary.9
9576d54
Update Babel Cache Key (#12989)
de51695
Remove unused babel-preset-react dep from babel-macros example (#12990)
01211ba
v9.4.1-canary.8
57dcdd9
Bypass OPTIONS handling for API routes (#12978)
32057c8
Use the jest-circus test runner (#12974)
c239c74
Use a top level heading (#12960)
7be3b10
Add experimental Storybook preset (#12934)
9d17d9e
Test TypeScript Enum (#12954)
fc927a2
v9.4.1-canary.7
9df9d4a
Fix build stalling with styled-jsx plugins (#12952)
202ea6f
Support eliminating memoized functions (#12953)
7edc815
Elimination has to run before other plugins (#12949)
18dc1f6
Remove isomorphic-unfetch
from examples (#12948)
There are 60 commits in total.
See the full diff
devDependency
next was updated from 9.4.1
to 9.4.2
.Your tests are still failing with this version. Compare changes
jsconfig.json
should not fail the build: #13051config
tests: #13116update_branch_immediately
: b0a020eupdate_branch_immediately
": b3e5233eval-source-map
for Server Side Errors: #13123reportWebVitals
: #13155Huge thanks to @timneutkens, @Janpot, @felixmosh, @jmgr2996, @developit, @kolyasapphire, @rafaelalmeidatk, @stigkj, @ijjk, @lboecker, @mattcarlotta, @tomevans18, @b-b0t, @guilhermedeandrade, @mpareja, @Ehesp, @maxigimenez, @TodorTotev, @prateekbh, @lfades, @slawekkolodziej, @leosuncin, @zlwaterfield, @twltwl, @cjimmy, @gregrickaby, @davecardwell, @taye, @Prioe, @christianalfoni, @janicklas-ralph, @kirill-konshin, and @pkuczynski for helping!
The new version differs by 75 commits.
91b1548
v9.4.2
05a12cb
v9.4.2-canary.5
7c7fd3e
Record presence of reportWebVitals
(#13155)
7cf3c3d
Feat/remove redundant imports from examples (#13062)
57815c5
Fix Windows LogBox Test (#13147)
74d7e35
Eliminate array destructuring assignment (#13151)
b325f15
Update Create Next App to handle rename of org (#13138)
5703362
v9.4.2-canary.4
92a159d
Correctly eliminate destructuring assignment (#13144)
e28ce34
Fix the link for Custom Server documentation (#13137)
b8284d9
Upgrade Next Redux Wrapper to version 6 in examples (#11802)
ccea1c0
Enable jest/no-try-expect (#13124)
a17ace8
GranularChunks conformance check (#11710)
cc9e252
With stitches (#12677)
993b78d
chore: Remove some redundant imports (#13066)
There are 75 commits in total.
See the full diff
devDependency
next was updated from 9.4.2
to 9.4.3
.Your tests are still failing with this version. Compare changes
chalk
import: #13235renderToHTMLWithComponents
Cont.: #13274react-refresh
: #13285Module not found
errors: #10797with-sentry-simple
example: #13404jsx
file extension: #13451tsconfig.json
comments: #13458Huge thanks to @Tylerian, @devknoll, @luciovilla, @ijjk, @maxigimenez, @prateekbh, @lfades, @timneutkens, @Arnarkari93, @balazsorban44, @TodorTotev, @willianjusten, @mvfsillva, @xliusstk, @alejandronanez, @iansu, @jtmthf, @Janpot, @mohsen1, @dylanjha, @chibicode, @sambokai, @vvo, @joejknowles, @UndyingSugimoto, @jamesmosier, @arcanis, @marcosvega91, @Regaddi, @sachaos, @tywmick, @c0b41, @giuseppeg, @erikdstock, @danielpaz6, @awareness481, @correttojs, @lostfictions, @benjaminpearson, @Timer, @jacobdcastro, @manuschillerdev, @scefali, @karlhorky, and @JMFURY for helping!
The new version differs by 94 commits.
96c3b08
v9.4.3
e792287
v9.4.3-canary.3
b7e17e0
Update references to zeit/next.js (#13463)
001230e
Add Route as Modal Page Example (#12945)
6ca00bf
Remove beta label from Netlify Plugins (#13465)
9f1b4f5
Add type inference for getStaticProps and getServerSideProps (#11842)
37f4353
Do not throw away tsconfig.json
comments (#13458)
d98cd8a
Add release argument to SentryWebpackPlugin (#13459)
1f6ce10
Update codeload and deploy links for org rename (#13141)
61ace6c
v9.4.3-canary.2
983d1da
[Docs]: minor typo in jsx
file extension (#13451)
e261935
Add warning when reserved pages are nested (#13449)
c731d59
Fix AMP Test Flake (#13450)
710997d
refactor(with-sentry): example (#13434)
c01a93a
chore(next-server): api-utils,crypto-utils,next-server missing types (#13431)
There are 94 commits in total.
See the full diff
devDependency
next was updated from 9.4.3
to 9.4.4
.Your tests are still failing with this version. Compare changes
☝️ Important announcement: Greenkeeper will be saying goodbye 👋 and passing the torch to Snyk on June 3rd, 2020! Find out how to migrate to Snyk and more at greenkeeper.io
The devDependency next was updated from
9.3.1
to9.3.2
.🚨 View failing branch.
This version is covered by your current version range and after updating it in your project the build failed.
next is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.
Status Details
- ❌ **ci/circleci: build:** Your tests failed on CircleCI ([Details](https://circleci.com/gh/taskanalytics/genus/750?utm_campaign=vcs-integration-link&utm_medium=referral&utm_source=github-build-link)).Release Notes for v9.3.2
This upgrade is completely backwards compatible and recommended for all users on versions below 9.3.2. For future security related communications of our OSS projects, please join this mailing list.
Next.js has just been audited by one of the top security firms in the world.
They found that attackers could craft special requests to access files in the dist directory (
.next
).This does not affect files outside of the dist directory (
.next
).In general, the dist directory only holds build assets unless your application intentionally stores other assets under this directory.
We recommend upgrading to the latest version of Next.js to improve the overall security of your application.
How to Upgrade
npm install next@latest --save
Impact
serverless
targetnext export
next start
We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.
How to Assess Impact
If you think sensitive code or data could have been exposed, you can filter logs of affected sites by
../
with a 200 response.What is Being Done
As Next.js has grown in popularity, it has received the attention of security researchers and auditors. We are thankful to Luca Carettoni from Doyensec for their investigation and discovery of the original bug and subsequent responsible disclosure.
We've landed a patch that ensures only known filesystem paths of
.next/static
are made available under/_next/static
.Regression tests for this attack were added to the security integration test suite.
Patches
remark
link in blog-starter's README: #11177isStaging
inwith-env
example: #11305Credits
Huge thanks to @chibicode, @ijjk, @timneutkens, @sebastianbenz, @zhe, @shaswatsaxena, @prateekbh, @vvo, @lfades, @bbortt, @aviaryan, @mgranados, @julianbenegas, @gregrickaby, @dulmandakh, @yosuke-furukawa, @tinymachine, @bgoerdt, @nicolasrouanne, @filipesmedeiros, @rishabhsaxena, and @queq1890 for helping!
Commits
The new version differs by 62 commits.
ee00813
v9.3.2
dd4cee7
v9.3.2-canary.9
e02b66a
Add with-redux-toolkit example (#11358)
044ddf4
[Example] Use .jpg for images in blog-starter (#11176)
ee249ee
v9.3.2-canary.8
1d6ffc3
Fix
static/
file name encoding (#11373)e83cd4a
v9.3.2-canary.7
d8155b2
Add initial support for new env handling (#10525)
a391d32
Add docs for multi zones (#11348)
4801dcd
Update AMP docs (#11353)
aac2e3e
v9.3.2-canary.6
2ba6db6
Update to prevent re-using workers for getStaticPaths in dev mode (#11347)
67fd72b
Fix preview-mode docs/examples typo (#11345)
074c60e
Update data-fetching.md
b46abed
use records to init store (#11343)
There are 62 commits in total.
See the full diff
FAQ and help
There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).Your Greenkeeper Bot :palm_tree: