search

upleveled / security-vulnerability-examples-next-js-postgres

https://vuln-examples-next-postgres-jose.vercel.app/
11 stars 6 forks source link

Update dependency upgrades - non-major #215

Closed renovate[bot] closed 3 months ago

renovate[bot] commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@types/node (source) 20.14.9 -> 20.14.10 age adoption passing confidence
dompurify 3.1.5 -> 3.1.6 age adoption passing confidence
next (source) 14.2.4 -> 14.2.5 age adoption passing confidence
pnpm (source) 9.4.0 -> 9.5.0 age adoption passing confidence
sass 1.77.6 -> 1.77.7 age adoption passing confidence

Release Notes

cure53/DOMPurify (dompurify) ### [`v3.1.6`](https://togithub.com/cure53/DOMPurify/releases/tag/3.1.6): DOMPurify 3.1.6 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.1.5...3.1.6) - Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks [@​kevin-mizu](https://togithub.com/kevin-mizu) - Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks [@​realansgar](https://togithub.com/realansgar) - Fixed a minor problem with the bower file pointing to the wrong dist path - Fixed several minor typos in docs, comments and comment blocks, thanks [@​Rotzbua](https://togithub.com/Rotzbua) - Updated several development dependencies
vercel/next.js (next) ### [`v14.2.5`](https://togithub.com/vercel/next.js/compare/v14.2.4...v14.2.5) [Compare Source](https://togithub.com/vercel/next.js/compare/v14.2.4...v14.2.5)
pnpm/pnpm (pnpm) ### [`v9.5.0`](https://togithub.com/pnpm/pnpm/compare/v9.5.0-beta.3...v9.5.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v9.4.0...v9.5.0)
sass/dart-sass (sass) ### [`v1.77.7`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1777) [Compare Source](https://togithub.com/sass/dart-sass/compare/1.77.6...1.77.7) - Declarations that appear after nested rules are deprecated, because the semantics Sass has historically used are different from the semantics specified by CSS. In the future, Sass will adopt the standard CSS semantics. See [the Sass website](https://sass-lang.com/d/mixed-decls) for details. - **Potentially breaking bug fix:** `//` in certain places such as unknown at-rule values was being preserved in the CSS output, leading to potentially invalid CSS. It's now properly parsed as a silent comment and omitted from the CSS output.

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.