search

upleveled / security-vulnerability-examples-next-js-postgres

https://vuln-examples-next-postgres-jose.vercel.app/
11 stars 6 forks source link

Update dependency upgrades - non-major #164

Closed renovate[bot] closed 9 months ago

renovate[bot] commented 9 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/node (source) 20.10.6 -> 20.11.0 age adoption passing confidence
@types/react (source) 18.2.46 -> 18.2.47 age adoption passing confidence
dompurify 3.0.7 -> 3.0.8 age adoption passing confidence
jsdom 23.0.1 -> 23.2.0 age adoption passing confidence
prettier-plugin-embed 0.3.2 -> 0.4.4 age adoption passing confidence

Release Notes

cure53/DOMPurify (dompurify) ### [`v3.0.8`](https://togithub.com/cure53/DOMPurify/releases/tag/3.0.8): DOMPurify 3.0.8 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.0.7...3.0.8) - Fixed errors caused by conditional exports, thanks [@​ssi02014](https://togithub.com/ssi02014) - Fixed a type error when working with custom element config, thanks [@​cpmotion](https://togithub.com/cpmotion)
jsdom/jsdom (jsdom) ### [`v23.2.0`](https://togithub.com/jsdom/jsdom/blob/HEAD/Changelog.md#2320) [Compare Source](https://togithub.com/jsdom/jsdom/compare/23.1.0...23.2.0) This release switches our CSS selector engine from [`nwsapi`](https://www.npmjs.com/nwsapi) to [`@asamuzakjp/dom-selector`](@​asamuzakjp/dom-selector). The new engine is more actively maintained, and supports many new selectors: see [the package's documentation](https://togithub.com/asamuzaK/domSelector#supported-css-selectors) for the full list. It also works better with shadow trees. There is a potential of a performance regression due to this change. In our stress test benchmark, which runs most of [these 273 selectors](https://togithub.com/jsdom/jsdom/blob/908f27d4e348502a9068f0b335a8518d050ef872/benchmark/selectors/sizzle-speed/selectors.large.css) against [this 128 KiB document](https://togithub.com/jsdom/jsdom/blob/908f27d4e348502a9068f0b335a8518d050ef872/benchmark/selectors/sizzle-speed/selector.html), the new engine completes the benchmark only 0.25x as fast. However, we're hopeful that in more moderate usage this will not be a significant issue. Any help speeding up `@asamuzakjp/dom-selector` is appreciated, and feel free to open an issue if this has had a significant impact on your project. ### [`v23.1.0`](https://togithub.com/jsdom/jsdom/blob/HEAD/Changelog.md#2310) [Compare Source](https://togithub.com/jsdom/jsdom/compare/23.0.1...23.1.0) - Added an initial implementation of `ElementInternals`, including the `shadowRoot` getter and the string-valued ARIA properties. (zjffun) - Added the string-valued ARIA attribute-reflecting properties to `Element`. - Fixed `history.pushState()` and `history.replaceState()` to follow the latest specification, notably with regards to how they handle empty string inputs and what new URLs are possible. - Fixed the `input.valueAsANumber` setter to handle `NaN` correctly. (alexandertrefz) - Updated various dependencies, including `cssstyle` which contains several bug fixes.
Sec-ant/prettier-plugin-embed (prettier-plugin-embed) ### [`v0.4.4`](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.3...v0.4.4) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.3...v0.4.4) ### [`v0.4.3`](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.2...v0.4.3) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.2...v0.4.3) ### [`v0.4.2`](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.1...v0.4.2) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.1...v0.4.2) ### [`v0.4.1`](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.0...v0.4.1) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.0...v0.4.1) ### [`v0.4.0`](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.3.2...v0.4.0) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.3.2...v0.4.0)

Configuration

šŸ“… Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

šŸš¦ Automerge: Enabled.

ā™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

šŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.