upleveled / security-vulnerability-examples-next-js-postgres

https://vuln-examples-next-postgres-jose.vercel.app/
11 stars 6 forks source link

Update dependency upgrades - non-major #169

Closed renovate[bot] closed 8 months ago

renovate[bot] commented 8 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/node (source) 20.11.6 -> 20.11.16 age adoption passing confidence
@types/react (source) 18.2.48 -> 18.2.51 age adoption passing confidence
dotenv 16.3.1 -> 16.4.1 age adoption passing confidence
prettier-plugin-embed 0.4.10 -> 0.4.13 age adoption passing confidence
stylelint (source) 16.2.0 -> 16.2.1 age adoption passing confidence

Release Notes

motdotla/dotenv (dotenv) ### [`v16.4.1`](https://togithub.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1641-2024-01-24) [Compare Source](https://togithub.com/motdotla/dotenv/compare/v16.4.0...v16.4.1) - Patch support for array as `path` option [#​797](https://togithub.com/motdotla/dotenv/pull/797) ### [`v16.4.0`](https://togithub.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1640-2024-01-23) [Compare Source](https://togithub.com/motdotla/dotenv/compare/v16.3.2...v16.4.0) - Add `error.code` to error messages around `.env.vault` decryption handling [#​795](https://togithub.com/motdotla/dotenv/pull/795) - Add ability to find `.env.vault` file when filename(s) passed as an array [#​784](https://togithub.com/motdotla/dotenv/pull/784) ### [`v16.3.2`](https://togithub.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1632-2024-01-18) [Compare Source](https://togithub.com/motdotla/dotenv/compare/v16.3.1...v16.3.2) ##### Added - Add debug message when no encoding set [#​735](https://togithub.com/motdotla/dotenv/pull/735) ##### Changed - Fix output typing for `populate` [#​792](https://togithub.com/motdotla/dotenv/pull/792) - Use subarray instead of slice [#​793](https://togithub.com/motdotla/dotenv/pull/793)
Sec-ant/prettier-plugin-embed (prettier-plugin-embed) ### [`v0.4.13`](https://togithub.com/Sec-ant/prettier-plugin-embed/blob/HEAD/CHANGELOG.md#0413) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.12...v0.4.13) ##### Patch Changes - [`b14447a`](https://togithub.com/Sec-ant/prettier-plugin-embed/commit/b14447a): Fix a regression introduced in v0.4.11 caused by a wrong import specifier. ### [`v0.4.12`](https://togithub.com/Sec-ant/prettier-plugin-embed/blob/HEAD/CHANGELOG.md#0412) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.11...v0.4.12) ##### Patch Changes - [`67d0726`](https://togithub.com/Sec-ant/prettier-plugin-embed/commit/67d0726): Fix a regression of formatting template literals with only whitespaces: - Template literals with only whitespaces should be formatted to ` `` `. ### [`v0.4.11`](https://togithub.com/Sec-ant/prettier-plugin-embed/blob/HEAD/CHANGELOG.md#0411) [Compare Source](https://togithub.com/Sec-ant/prettier-plugin-embed/compare/v0.4.10...v0.4.11) ##### Patch Changes - [`3639712`](https://togithub.com/Sec-ant/prettier-plugin-embed/commit/3639712): Set up changesets - [`f4a41e7`](https://togithub.com/Sec-ant/prettier-plugin-embed/commit/f4a41e7): Deprecate `identifier`-named options. - Change options `embeddedIdentifiers` to `embeddedComments` and `embeddedTags`. - Remove option ~~`noEmbeddedIdentificationByComment`~~ because it is not needed anymore. - Remove option ~~`noEmbeddedIdentificationByTag`~~ because it is not needded anymore. - `embeddedOverrides` now takes the form: ```json {"comments": [...], "options": {...}} ``` or ```json {"tags": [...], "options": {...}} ``` or ```json {"comments": [...], "tags": [...], "options": {...}} ``` The property `identifiers` is kept for compatibility and will serve as fallbacks. - If `comment`- or `tag`-named options are not present, the plugin will fallback to use `identifier`-named options. - README updated to reflect the above changes. - **NO** breaking changes.
stylelint/stylelint (stylelint) ### [`v16.2.1`](https://togithub.com/stylelint/stylelint/blob/HEAD/CHANGELOG.md#1621) [Compare Source](https://togithub.com/stylelint/stylelint/compare/16.2.0...16.2.1) - Fixed: report flags not reporting on subsequent runs when cache is used ([#​7483](https://togithub.com/stylelint/stylelint/pull/7483)) ([@​ybiquitous](https://togithub.com/ybiquitous)). - Fixed: `custom-property-no-missing-var-function` false positives for properties that can contain author-defined identifiers ([#​7478](https://togithub.com/stylelint/stylelint/pull/7478)) ([@​ybiquitous](https://togithub.com/ybiquitous)). - Fixed: `selector-pseudo-class-no-unknown` false positives for `:seeking`, the media loading state and sound state pseudo-classes ([#​7490](https://togithub.com/stylelint/stylelint/pull/7490)) ([@​Mouvedia](https://togithub.com/Mouvedia)). - Fixed: `selector-max-specificity` false positives with `ignoreSelectors` option for `of ` syntax ([#​7475](https://togithub.com/stylelint/stylelint/pull/7475)) ([@​ybiquitous](https://togithub.com/ybiquitous)). - Fixed: `function-calc-no-unspaced-operator` performance ([#​7505](https://togithub.com/stylelint/stylelint/pull/7505)) ([@​ybiquitous](https://togithub.com/ybiquitous)). - Fixed: `validateOptions` to report when secondary option object is an empty object or null ([#​7476](https://togithub.com/stylelint/stylelint/pull/7476)) ([@​ybiquitous](https://togithub.com/ybiquitous)). - Fixed: `report()` error message responsibility for a missing node or line number ([#​7474](https://togithub.com/stylelint/stylelint/pull/7474)) ([@​ybiquitous](https://togithub.com/ybiquitous)).

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

socket-security[bot] commented 8 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/prettier-plugin-embed@0.4.13 environment +7 1000 kB sec-ant
npm/stylelint@16.2.1 Transitive: environment, filesystem, shell, unsafe +132 42 MB davidtheclark, hudochenkov, jeddy3, ...3 more

🚮 Removed packages: npm/@types/node@20.11.6, npm/@types/react@18.2.48, npm/prettier-plugin-embed@0.4.10, npm/stylelint@16.2.0

View full report↗︎