weareinreach / InReach

InReach is the worldโ€™s first open source platform matching LGBTQ+ people facing persecution or discrimination with safe, independently verified resources.
https://app.inreach.org
GNU General Public License v3.0
42 stars 4 forks source link

fix(auth): update all non-major dependencies #1387

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change OpenSSF
@aws-sdk/client-cognito-identity-provider (source) dependencies minor 3.631.0 -> 3.632.0 OpenSSF Scorecard
@playwright/test (source) devDependencies patch 1.46.0 -> 1.46.1 OpenSSF Scorecard
@swc/core (source) devDependencies patch 1.7.11 -> 1.7.12 OpenSSF Scorecard
@types/node (source) devDependencies minor 20.14.15 -> 20.16.1 OpenSSF Scorecard
i18next (source) peerDependencies minor 23.12.4 -> 23.14.0 OpenSSF Scorecard
i18next (source) devDependencies minor 23.12.4 -> 23.14.0 OpenSSF Scorecard
i18next (source) dependencies minor 23.12.4 -> 23.14.0 OpenSSF Scorecard
i18next-http-backend peerDependencies minor 2.5.2 -> 2.6.0 OpenSSF Scorecard
i18next-http-backend devDependencies minor 2.5.2 -> 2.6.0 OpenSSF Scorecard
i18next-http-backend dependencies minor 2.5.2 -> 2.6.0 OpenSSF Scorecard
type-fest devDependencies minor 4.24.0 -> 4.25.0 OpenSSF Scorecard

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-cognito-identity-provider) ### [`v3.632.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-cognito-identity-provider/CHANGELOG.md#36320-2024-08-15) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.631.0...v3.632.0) **Note:** Version bump only for package [@​aws-sdk/client-cognito-identity-provider](https://togithub.com/aws-sdk/client-cognito-identity-provider)
microsoft/playwright (@​playwright/test) ### [`v1.46.1`](https://togithub.com/microsoft/playwright/compare/v1.46.0...e1c861cfa7a6caf3c5b798786b1e6298c4f3cf31) [Compare Source](https://togithub.com/microsoft/playwright/compare/v1.46.0...v1.46.1)
swc-project/swc (@​swc/core) ### [`v1.7.12`](https://togithub.com/swc-project/swc/blob/HEAD/CHANGELOG.md#1712---2024-08-19) [Compare Source](https://togithub.com/swc-project/swc/compare/v1.7.11...v1.7.12) ##### Bug Fixes - **(common)** Do not use `adjust_mappings` from `sourcemap` crate ([#​9437](https://togithub.com/swc-project/swc/issues/9437)) ([563c162](https://togithub.com/swc-project/swc/commit/563c162f1ca8904e7b9a61a0c79fad952a56d624)) - **(es)** Mark TypeScript nodes as reachable from `Evaluator` ([#​9440](https://togithub.com/swc-project/swc/issues/9440)) ([308e5ec](https://togithub.com/swc-project/swc/commit/308e5ec81b4e6d49c5940f2d8914d8627f838141)) - **(es/compat)** Init this in sub class constructor for async ([#​9446](https://togithub.com/swc-project/swc/issues/9446)) ([bfaf31b](https://togithub.com/swc-project/swc/commit/bfaf31bc4b90ff803457bfdafdbcef0318b76189)) - **(es/decorators)** Fix metadata for accessors ([#​9444](https://togithub.com/swc-project/swc/issues/9444)) ([99738ef](https://togithub.com/swc-project/swc/commit/99738ef41233211d6e26de520c3817d395492d37)) ##### Miscellaneous Tasks - **(deps)** Update rust crate arrayvec to v0.7.6 ([#​9436](https://togithub.com/swc-project/swc/issues/9436)) ([08dd948](https://togithub.com/swc-project/swc/commit/08dd948289006583c6f0f76850c08808651f9135))
i18next/i18next (i18next) ### [`v23.14.0`](https://togithub.com/i18next/i18next/blob/HEAD/CHANGELOG.md#23140) [Compare Source](https://togithub.com/i18next/i18next/compare/v23.13.0...v23.14.0) - If backend errors with retry flag, set internal state to 0, so reloadingResources should work [147](https://togithub.com/i18next/i18next-http-backend/issues/147) ### [`v23.13.0`](https://togithub.com/i18next/i18next/blob/HEAD/CHANGELOG.md#23130) [Compare Source](https://togithub.com/i18next/i18next/compare/v23.12.7...v23.13.0) - Cache output of getRule to optimize performance [2226](https://togithub.com/i18next/i18next/pull/2226) ### [`v23.12.7`](https://togithub.com/i18next/i18next/blob/HEAD/CHANGELOG.md#23127) [Compare Source](https://togithub.com/i18next/i18next/compare/v23.12.6...v23.12.7) - revert last optimization to address [2227](https://togithub.com/i18next/i18next/issues/2227) ### [`v23.12.6`](https://togithub.com/i18next/i18next/blob/HEAD/CHANGELOG.md#23126) [Compare Source](https://togithub.com/i18next/i18next/compare/v23.12.5...v23.12.6) - remove console.log statement [2227](https://togithub.com/i18next/i18next/issues/2227) ### [`v23.12.5`](https://togithub.com/i18next/i18next/blob/HEAD/CHANGELOG.md#23125) [Compare Source](https://togithub.com/i18next/i18next/compare/v23.12.4...v23.12.5) - try to optimize last fix for [2227](https://togithub.com/i18next/i18next/issues/2227)
i18next/i18next-http-backend (i18next-http-backend) ### [`v2.6.0`](https://togithub.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#260) [Compare Source](https://togithub.com/i18next/i18next-http-backend/compare/v2.5.2...v2.6.0) - fix "Failed to fetch" retry case [147](https://togithub.com/i18next/i18next-http-backend/issues/147)
sindresorhus/type-fest (type-fest) ### [`v4.25.0`](https://togithub.com/sindresorhus/type-fest/releases/tag/v4.25.0) [Compare Source](https://togithub.com/sindresorhus/type-fest/compare/v4.24.0...v4.25.0) - Add `StringRepeat` type ([#​938](https://togithub.com/sindresorhus/type-fest/issues/938)) [`a83e87e`](https://togithub.com/sindresorhus/type-fest/commit/a83e87e) - Add `Arrayable` type [#​270](https://togithub.com/sindresorhus/type-fest/issues/270) ([#​935](https://togithub.com/sindresorhus/type-fest/issues/935)) [`9aabcb9`](https://togithub.com/sindresorhus/type-fest/commit/9aabcb9)

Configuration

๐Ÿ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

๐Ÿšฆ Automerge: Disabled by config. Please merge this manually once you are satisfied.

โ™ป Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

๐Ÿ‘ป Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

vercel[bot] commented 3 months ago

The latest updates on your projects. Learn more about Vercel for Git โ†—๏ธŽ

Name Status Preview Comments Updated (UTC)
inreach-app โœ… Ready (Inspect) Visit Preview ๐Ÿ’ฌ Add feedback Aug 19, 2024 11:28am
coderabbitai[bot] commented 3 months ago

Walkthrough

The recent updates across multiple packages involve upgrading several dependencies, notably the i18next library to version 23.14.0, along with various updates to the @types/node and type-fest packages. These changes enhance internationalization capabilities, improve type definitions, and maintain overall stability and compatibility within the project. The updates focus on performance improvements without altering the core application logic.

Changes

File(s) Change Summary
apps/app/package.json, apps/web/package.json, packages/api/package.json, packages/ui/package.json Updated i18next from 23.12.4 to 23.14.0 across all mentioned files.
packages/auth/package.json Updated @aws-sdk/client-cognito-identity-provider from 3.631.0 to 3.632.0.
packages/config/package.json, packages/db/package.json, packages/env/package.json, packages/eslint-config/package.json, packages/util/package.json, lambdas/cognito-messaging/package.json, lambdas/cognito-user-migrate/package.json Updated @types/node from 20.14.15 to 20.16.1 across all mentioned files.
packages/api/package.json, packages/db/package.json, packages/ui/package.json Updated type-fest from 4.24.0 to 4.25.0 in the mentioned files.

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share - [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai) - [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai) - [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai) - [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)
Tips ### Chat There are 3 ways to chat with [CodeRabbit](https://coderabbit.ai): - Review comments: Directly reply to a review comment made by CodeRabbit. Example: - `I pushed a fix in commit .` - `Generate unit testing code for this file.` - `Open a follow-up GitHub issue for this discussion.` - Files and specific lines of code (under the "Files changed" tab): Tag `@coderabbitai` in a new review comment at the desired location with your query. Examples: - `@coderabbitai generate unit testing code for this file.` - `@coderabbitai modularize this function.` - PR comments: Tag `@coderabbitai` in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples: - `@coderabbitai generate interesting stats about this repository and render them as a table.` - `@coderabbitai show all the console.log statements in this repository.` - `@coderabbitai read src/utils.ts and generate unit testing code.` - `@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.` - `@coderabbitai help me debug CodeRabbit configuration file.` Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. ### CodeRabbit Commands (invoked as PR comments) - `@coderabbitai pause` to pause the reviews on a PR. - `@coderabbitai resume` to resume the paused reviews. - `@coderabbitai review` to trigger an incremental review. This is useful when automatic reviews are disabled for the repository. - `@coderabbitai full review` to do a full review from scratch and review all the files again. - `@coderabbitai summary` to regenerate the summary of the PR. - `@coderabbitai resolve` resolve all the CodeRabbit review comments. - `@coderabbitai configuration` to show the current CodeRabbit configuration for the repository. - `@coderabbitai help` to get help. Additionally, you can add `@coderabbitai ignore` anywhere in the PR description to prevent this PR from being reviewed. ### CodeRabbit Configuration File (`.coderabbit.yaml`) - You can programmatically configure CodeRabbit by adding a `.coderabbit.yaml` file to the root of your repository. - Please see the [configuration documentation](https://docs.coderabbit.ai/guides/configure-coderabbit) for more information. - If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: `# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json` ### Documentation and Community - Visit our [Documentation](https://coderabbit.ai/docs) for detailed information on how to use CodeRabbit. - Join our [Discord Community](https://discord.com/invite/GsXnASn26c) to get help, request features, and share feedback. - Follow us on [X/Twitter](https://twitter.com/coderabbitai) for updates and announcements.
relativeci[bot] commented 3 months ago

#1267 Bundle Size โ€” 3.49MiB (+0.01%).

404afab(current) vs 30ef8a0 dev#1257(baseline)

[!WARNING] Bundle contains 5 duplicate packages โ€“ View duplicate packages

Bundle metrics  Change 2 changes Regression 1 regression
โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒ โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒCurrent
#1267
โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒBaseline
#1257
Regression  Initial JS 3.06MiB(+0.01%) 3.06MiB
No change  Initial CSS 9.54KiB 9.54KiB
Change  Cache Invalidation 66.1% 49.05%
No change  Chunks 67 67
No change  Assets 80 80
No change  Modules 2013 2013
No change  Duplicate Modules 361 361
No change  Duplicate Code 10.03% 10.03%
No change  Packages 159 159
No change  Duplicate Packages 5 5

Bundle size by type  Change 2 changes Regression 2 regressions
| โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒ | โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒโ€ƒCurrent
[#1267](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5?utm_source=github&utm_medium=pr-report "View bundle analysis report") | โ€ƒโ€ƒโ€ƒโ€ƒโ€ƒBaseline
[#1257](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1257-8GiPas5rvIEoXw42Ymm8?utm_source=github&utm_medium=pr-report "View baseline bundle analysis report") | |:--|--:|--:| | Regression  [JS](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-1_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View JS assets") | `3.37MiB` (`+0.01%`) | `3.37MiB` | | No change  [Fonts](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-1_ft.HTML-0_ft.OTHER-0%22%7D "View Fonts assets") | `94.54KiB` | `94.54KiB` | | No change  [CSS](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5/assets?ba=%7B%22filters%22%3A%22ft.CSS-1_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View CSS assets") | `9.54KiB` | `9.54KiB` | | Regression  [Other](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-1%22%7D "View Other assets") | `8.7KiB` (`+0.13%`) | `8.69KiB` | | No change  [IMG](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1267-o4gkQSWEwxYt5hnwHdy5/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-1_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View IMG assets") | `8.57KiB` | `8.57KiB` |

Bundle analysis reportโ€ƒBranch renovate/all-minor-patchโ€ƒProject dashboard


Generated by RelativeCIโ€ƒDocumentationโ€ƒReport issue

github-actions[bot] commented 3 months ago

๐Ÿ“ฆ Next.js Bundle Analysis for @weareinreach/app

This analysis was generated by the Next.js Bundle Analysis action. ๐Ÿค–

This PR introduced no changes to the JavaScript bundle! ๐Ÿ™Œ

alwaysmeticulous[bot] commented 3 months ago

๐Ÿค– No test run has been triggered as your Meticulous project has been deactivated (since you haven't viewed any test results in a while). Click here to reactivate.

Last updated for commit 404afab. This comment will update as new commits are pushed.

socket-security[bot] commented 3 months ago

New and removed dependencies detected. Learn more about Socket for GitHub โ†—๏ธŽ

Package New capabilities Transitives Size Publisher
npm/@aws-sdk/client-cognito-identity-provider@3.632.0 Transitive: environment, filesystem, network, shell +68 5.89 MB aws-sdk-bot
npm/@playwright/test@1.46.1 None 0 25.4 kB dgozman-ms, mxschmitt, pavelfeldman, ...1 more
npm/@swc/core@1.7.12 None +2 310 kB kdy1, kwonoj
npm/@types/node@20.16.1 None 0 2.1 MB types

๐Ÿšฎ Removed packages: npm/@aws-sdk/client-cognito-identity-provider@3.631.0, npm/@playwright/test@1.46.0, npm/@swc/core@1.7.11, npm/@types/node@20.14.15

View full reportโ†—๏ธŽ

socket-security[bot] commented 3 months ago

๐Ÿ‘ Dependency issues cleared. Learn more about Socket for GitHub โ†—๏ธŽ

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full reportโ†—๏ธŽ

sonarcloud[bot] commented 2 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud