search

weareinreach / InReach

InReach is the world’s first open source platform matching LGBTQ+ people facing persecution or discrimination with safe, independently verified resources.
https://app.inreach.org
GNU General Public License v3.0
42 stars 4 forks source link

fix(auth): update all non-major dependencies #1391

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 2 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change OpenSSF Age Adoption Passing Confidence
@aws-sdk/client-cognito-identity-provider (source) dependencies minor 3.632.0 -> 3.635.0 OpenSSF Scorecard age adoption passing confidence
@chromatic-com/storybook devDependencies minor 1.6.1 -> 1.7.0 OpenSSF Scorecard age adoption passing confidence
@emotion/react (source) peerDependencies patch 11.13.0 -> 11.13.3 OpenSSF Scorecard age adoption passing confidence
@emotion/react (source) devDependencies patch 11.13.0 -> 11.13.3 OpenSSF Scorecard age adoption passing confidence
@emotion/react (source) dependencies patch 11.13.0 -> 11.13.3 OpenSSF Scorecard age adoption passing confidence
@iconify-json/simple-icons devDependencies patch 1.1.113 -> 1.1.114 age adoption passing confidence
@iconify/utils (source) devDependencies patch 2.1.30 -> 2.1.31 OpenSSF Scorecard age adoption passing confidence
@types/react (source) devDependencies patch 18.3.3 -> 18.3.4 OpenSSF Scorecard age adoption passing confidence
dayjs (source) peerDependencies patch 1.11.12 -> 1.11.13 OpenSSF Scorecard age adoption passing confidence
dayjs (source) devDependencies patch 1.11.12 -> 1.11.13 OpenSSF Scorecard age adoption passing confidence
dayjs (source) dependencies patch 1.11.12 -> 1.11.13 OpenSSF Scorecard age adoption passing confidence
google-auth-library devDependencies minor 9.13.0 -> 9.14.0 OpenSSF Scorecard age adoption passing confidence
husky devDependencies patch 9.1.4 -> 9.1.5 OpenSSF Scorecard age adoption passing confidence
i18next-http-backend peerDependencies patch 2.6.0 -> 2.6.1 OpenSSF Scorecard age adoption passing confidence
i18next-http-backend devDependencies patch 2.6.0 -> 2.6.1 OpenSSF Scorecard age adoption passing confidence
i18next-http-backend dependencies patch 2.6.0 -> 2.6.1 OpenSSF Scorecard age adoption passing confidence

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-cognito-identity-provider) ### [`v3.635.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-cognito-identity-provider/CHANGELOG.md#36350-2024-08-20) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.632.0...v3.635.0) ##### Features - **codegen:** add Smithy RPCv2 CBOR to list of protocols ([#​6096](https://togithub.com/aws/aws-sdk-js-v3/issues/6096)) ([5154d4f](https://togithub.com/aws/aws-sdk-js-v3/commit/5154d4f19bc77a7bad075b35ce135d3b5f60ad1d))
chromaui/addon-visual-tests (@​chromatic-com/storybook) ### [`v1.7.0`](https://togithub.com/chromaui/addon-visual-tests/blob/HEAD/CHANGELOG.md#v170-Tue-Aug-20-2024) [Compare Source](https://togithub.com/chromaui/addon-visual-tests/compare/v1.6.1...v1.7.0) ##### 🚀 Enhancement - Update story status reporting for Storybook 8.3 and use new `SET_FILTER` event [#​332](https://togithub.com/chromaui/addon-visual-tests/pull/332) ([@​ghengeveld](https://togithub.com/ghengeveld)) ##### Authors: 1 - Gert Hengeveld ([@​ghengeveld](https://togithub.com/ghengeveld)) ***
emotion-js/emotion (@​emotion/react) ### [`v11.13.3`](https://togithub.com/emotion-js/emotion/compare/@emotion/react@11.13.0...3f468846855ed1c6092922a6317a6f5df0ba8dcc) [Compare Source](https://togithub.com/emotion-js/emotion/compare/@emotion/react@11.13.0...@emotion/react@11.13.3)
iamkun/dayjs (dayjs) ### [`v1.11.13`](https://togithub.com/iamkun/dayjs/compare/v1.11.12...93c8fd0f807b8a8252f4cd65083bb1d6a49b90e7) [Compare Source](https://togithub.com/iamkun/dayjs/compare/v1.11.12...v1.11.13)
googleapis/google-auth-library-nodejs (google-auth-library) ### [`v9.14.0`](https://togithub.com/googleapis/google-auth-library-nodejs/blob/HEAD/CHANGELOG.md#9140-2024-08-19) [Compare Source](https://togithub.com/googleapis/google-auth-library-nodejs/compare/v9.13.0...v9.14.0) ##### Features - Add `AnyAuthClient` type ([#​1843](https://togithub.com/googleapis/google-auth-library-nodejs/issues/1843)) ([3ae120d](https://togithub.com/googleapis/google-auth-library-nodejs/commit/3ae120d0a45c95e36c59c9ac8286483938781f30)) - Extend API Key Support ([#​1835](https://togithub.com/googleapis/google-auth-library-nodejs/issues/1835)) ([5fc3bcc](https://togithub.com/googleapis/google-auth-library-nodejs/commit/5fc3bccacc74082f71983595dd7654b1b60be0f8)) - Group Concurrent `getClient` Requests ([#​1848](https://togithub.com/googleapis/google-auth-library-nodejs/issues/1848)) ([243ce28](https://togithub.com/googleapis/google-auth-library-nodejs/commit/243ce284bedd101a15a0e738a59a7db808c2ad3f)) ##### Bug Fixes - **deps:** Update dependency [@​googleapis/iam](https://togithub.com/googleapis/iam) to v21 ([#​1847](https://togithub.com/googleapis/google-auth-library-nodejs/issues/1847)) ([e9459f3](https://togithub.com/googleapis/google-auth-library-nodejs/commit/e9459f3d11418ce8afd4fe87cd92d4b2d06457ba))
typicode/husky (husky) ### [`v9.1.5`](https://togithub.com/typicode/husky/compare/v9.1.4...2fee8d212c601942ad146ea9209f15c20a07fb6d) [Compare Source](https://togithub.com/typicode/husky/compare/v9.1.4...v9.1.5)
i18next/i18next-http-backend (i18next-http-backend) ### [`v2.6.1`](https://togithub.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#261) [Compare Source](https://togithub.com/i18next/i18next-http-backend/compare/v2.6.0...v2.6.1) - optimize "Failed to fetch" retry case [147](https://togithub.com/i18next/i18next-http-backend/issues/147)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

vercel[bot] commented 2 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
inreach-app ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 21, 2024 2:24pm
coderabbitai[bot] commented 2 months ago

Walkthrough

The recent updates involve minor version increments for several packages across the project to enhance stability and incorporate potential bug fixes. The husky package was updated from 9.1.4 to 9.1.5, and the google-auth-library was upgraded in the DB package from 9.13.0 to 9.14.0. Additionally, the UI package received updates for @chromatic-com/storybook, @emotion/react, @iconify-json/simple-icons, and dayjs, while the @emotion/react, dayjs, and @types/react libraries were updated across both the app and web packages.

Changes

Files Change Summary
package.json Updated husky version from 9.1.4 to 9.1.5
packages/db/package.json Updated google-auth-library version from 9.13.0 to 9.14.0
packages/ui/package.json Updated @chromatic-com/storybook from 1.6.1 to 1.7.0, @emotion/react from 11.13.0 to 11.13.3, @iconify-json/simple-icons from 1.1.113 to 1.1.114, and dayjs from 1.11.12 to 1.11.13
apps/app/package.json, apps/web/package.json Updated @emotion/react from 11.13.0 to 11.13.3, dayjs from 1.11.12 to 1.11.13, and @types/react from 18.3.3 to 18.3.4 across both packages
packages/auth/package.json Updated @aws-sdk/client-cognito-identity-provider from 3.632.0 to 3.635.0 and @types/react from 18.3.3 to 18.3.4

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share - [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai) - [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai) - [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai) - [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)
Tips ### Chat There are 3 ways to chat with [CodeRabbit](https://coderabbit.ai): - Review comments: Directly reply to a review comment made by CodeRabbit. Example: - `I pushed a fix in commit .` - `Generate unit testing code for this file.` - `Open a follow-up GitHub issue for this discussion.` - Files and specific lines of code (under the "Files changed" tab): Tag `@coderabbitai` in a new review comment at the desired location with your query. Examples: - `@coderabbitai generate unit testing code for this file.` - `@coderabbitai modularize this function.` - PR comments: Tag `@coderabbitai` in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples: - `@coderabbitai generate interesting stats about this repository and render them as a table.` - `@coderabbitai show all the console.log statements in this repository.` - `@coderabbitai read src/utils.ts and generate unit testing code.` - `@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.` - `@coderabbitai help me debug CodeRabbit configuration file.` Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. ### CodeRabbit Commands (invoked as PR comments) - `@coderabbitai pause` to pause the reviews on a PR. - `@coderabbitai resume` to resume the paused reviews. - `@coderabbitai review` to trigger an incremental review. This is useful when automatic reviews are disabled for the repository. - `@coderabbitai full review` to do a full review from scratch and review all the files again. - `@coderabbitai summary` to regenerate the summary of the PR. - `@coderabbitai resolve` resolve all the CodeRabbit review comments. - `@coderabbitai configuration` to show the current CodeRabbit configuration for the repository. - `@coderabbitai help` to get help. Additionally, you can add `@coderabbitai ignore` anywhere in the PR description to prevent this PR from being reviewed. ### CodeRabbit Configuration File (`.coderabbit.yaml`) - You can programmatically configure CodeRabbit by adding a `.coderabbit.yaml` file to the root of your repository. - Please see the [configuration documentation](https://docs.coderabbit.ai/guides/configure-coderabbit) for more information. - If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: `# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json` ### Documentation and Community - Visit our [Documentation](https://coderabbit.ai/docs) for detailed information on how to use CodeRabbit. - Join our [Discord Community](https://discord.com/invite/GsXnASn26c) to get help, request features, and share feedback. - Follow us on [X/Twitter](https://twitter.com/coderabbitai) for updates and announcements.
socket-security[bot] commented 2 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@aws-sdk/client-cognito-identity-provider@3.635.0 Transitive: environment, filesystem, network, shell +68 5.95 MB aws-sdk-bot
npm/@changesets/cli@2.27.7 environment, filesystem, shell +23 1.91 MB changesets-release-bot
npm/@chromatic-com/storybook@1.7.0 None 0 4.07 MB andrewortwein, cdedreuille, codykaup, ...9 more
npm/@crowdin/crowdin-api-client@1.35.0 network 0 482 kB andrii.bodnar
npm/@crowdin/ota-client@1.0.0 None 0 22.4 kB andrii.bodnar
npm/@emotion/react@11.13.3 Transitive: environment +26 7.82 MB emotion-release-bot
npm/@emotion/server@11.11.0 environment +1 68.6 kB emotion-release-bot
npm/@faker-js/faker@8.4.1 None 0 10.2 MB shinigami92
npm/@googlemaps/google-maps-services-js@3.4.0 Transitive: network +2 711 kB google-wombot
npm/@googlemaps/react-wrapper@1.1.42 None +1 263 kB google-wombot
npm/@hookform/devtools@4.3.1 environment +26 9.21 MB bluebill1049
npm/@hookform/error-message@2.0.1 None 0 21.3 kB bluebill1049
npm/@hookform/resolvers@3.9.0 None 0 712 kB bluebill1049
npm/@iconify-icon/react@2.1.0 None 0 19.2 kB cyberalien
npm/@iconify-json/carbon@1.1.37 None 0 1.04 MB cyberalien
npm/@iconify-json/fluent-mdl2@1.1.8 None 0 807 kB cyberalien
npm/@iconify-json/mdi@1.1.68 None 0 3.47 MB cyberalien
npm/@iconify-json/ph@1.1.14 None 0 4.57 MB cyberalien
npm/@iconify-json/simple-icons@1.1.114 None 0 4.68 MB cyberalien
npm/@iconify/react@4.1.1 network 0 179 kB cyberalien
npm/@iconify/types@2.0.0 None 0 25.7 kB cyberalien
npm/@iconify/utils@2.1.31 Transitive: filesystem +2 465 kB cyberalien
npm/@mantine/carousel@6.0.22 None 0 144 kB rtivital
npm/@mantine/core@6.0.22 Transitive: environment +19 8.31 MB rtivital
npm/@mantine/dates@6.0.22 environment 0 1.16 MB rtivital
npm/@mantine/form@6.0.22 None 0 220 kB rtivital
npm/@mantine/hooks@6.0.22 environment 0 563 kB rtivital
npm/@mantine/next@6.0.22 None +2 391 kB rtivital
npm/@mantine/notifications@6.0.22 None 0 102 kB rtivital
npm/@mantine/nprogress@6.0.22 None 0 45.8 kB rtivital
npm/@mantine/utils@6.0.22 None 0 86.4 kB rtivital
npm/@next-auth/prisma-adapter@1.0.7 None 0 20.5 kB balazsorban
npm/@next/bundle-analyzer@14.2.5 None 0 3.38 kB vercel-release-bot
npm/@next/eslint-plugin-next@14.2.5 filesystem 0 78.7 kB vercel-release-bot
npm/@next/third-parties@14.2.5 None 0 14.1 kB vercel-release-bot
npm/@octokit/core@5.2.0 Transitive: network +7 4.78 MB octokitbot
npm/@opentelemetry/exporter-trace-otlp-http@0.52.1 Transitive: network +5 9.41 MB pichlermarc
npm/@opentelemetry/instrumentation@0.52.1 filesystem +2 602 kB pichlermarc
npm/@opentelemetry/sdk-node@0.52.1 environment Transitive: filesystem, network +12 12.2 MB pichlermarc
npm/@opentelemetry/sdk-trace-node@1.25.1 Transitive: unsafe +3 315 kB pichlermarc
npm/@playwright/test@1.46.1 None 0 25.4 kB dgozman-ms, mxschmitt, pavelfeldman, ...1 more
npm/@prisma/client@5.18.0 environment, filesystem, shell 0 8.41 MB prismabot
npm/@prisma/instrumentation@5.18.0 environment 0 35.6 kB prismabot
npm/@prisma/nextjs-monorepo-workaround-plugin@5.18.0 filesystem 0 18.2 kB prismabot
npm/@relative-ci/agent@4.2.10 environment, filesystem, shell +2 72.7 kB relativeci-bot
npm/@sentry/browser@8.26.0 network +7 9.99 MB sentry-bot
npm/@sentry/nextjs@8.26.0 environment, filesystem, network Transitive: shell, unsafe +35 17.5 MB sentry-bot
npm/@sentry/node@8.26.0 environment, unsafe Transitive: network +28 9.49 MB sentry-bot
npm/@sentry/opentelemetry@8.26.0 Transitive: network +3 4.38 MB sentry-bot
npm/@sentry/profiling-node@8.26.0 environment, filesystem, shell Transitive: network +3 6.79 MB sentry-bot
npm/@snaplet/copycat@5.0.0 None 0 1.89 MB justinvdm
npm/@snaplet/seed@0.98.0 Transitive: environment, eval, filesystem, network, shell +34 14.5 MB jgoux
npm/@storybook/addon-a11y@8.2.9 None +2 58 kB shilman
npm/@storybook/addon-actions@8.2.9 None +2 70.2 kB shilman
npm/@storybook/addon-designs@8.0.3 None +3 629 kB yannbf
npm/@storybook/addon-essentials@8.2.9 Transitive: environment, eval, filesystem, unsafe +38 13.1 MB shilman
npm/@storybook/addon-interactions@8.2.9 Transitive: environment +3 442 kB shilman
npm/@storybook/addon-links@8.2.9 None +2 71.3 kB shilman
npm/@storybook/addon-mdx-gfm@8.2.9 None 0 3.25 kB shilman
npm/@storybook/addon-viewport@8.2.9 None 0 16.5 kB shilman
npm/@storybook/addon-webpack5-compiler-swc@1.0.5 None 0 3.3 MB valentinpalkovic
npm/@storybook/components@8.2.9 None 0 1.24 kB shilman
npm/@storybook/core-events@8.2.9 None 0 3.82 kB shilman
npm/@storybook/manager-api@8.2.9 None 0 1.22 kB shilman
npm/@storybook/nextjs@8.2.9 environment Transitive: filesystem, unsafe +125 17.7 MB shilman
npm/@storybook/preview-api@8.2.9 None 0 1.24 kB shilman
npm/@storybook/react@8.2.9 None +8 3.47 MB shilman
npm/@storybook/test-runner@0.19.1 environment, eval, filesystem, shell, unsafe +34 11.8 MB shilman
npm/@storybook/test@8.2.9 environment, eval +16 6.37 MB shilman
npm/@storybook/theming@8.2.9 None 0 1.56 kB shilman
npm/@storybook/types@8.2.9 None 0 1.19 kB shilman
npm/@swc/core@1.7.14 None +2 310 kB kdy1, kwonoj
npm/@swc/helpers@0.5.12 None 0 231 kB kdy1
npm/@t3-oss/env-nextjs@0.9.2 None +1 27.6 kB juliusmarminge
npm/@tanstack/eslint-plugin-query@4.38.0 environment 0 369 kB tannerlinsley
npm/@tanstack/react-query-devtools@4.36.1 environment +1 1.86 MB tannerlinsley
npm/@tanstack/react-query@4.36.1 environment +1 3.6 MB tannerlinsley
npm/@tanstack/react-table-devtools@8.20.1 None 0 443 kB tannerlinsley
npm/@tanstack/react-table@8.20.1 Transitive: environment +1 4.05 MB tannerlinsley
npm/@terraformer/wkt@2.2.1 None 0 92.6 kB jgravois
npm/@textea/json-viewer@3.4.1 environment +38 25.7 MB pionxzh
npm/@tomfreudenberg/next-auth-mock@0.5.6 None 0 34 kB tom-freudenberg
npm/@total-typescript/ts-reset@0.5.1 None 0 11.7 kB mpocock
npm/@trpc/client@10.45.2 network 0 253 kB katt
npm/@trpc/next@10.45.2 None 0 111 kB katt
npm/@trpc/react-query@10.45.2 None 0 285 kB katt
npm/@trpc/server@10.45.2 environment 0 713 kB katt
npm/@turbo/gen@2.0.14 Transitive: environment, eval, filesystem +1 935 kB turbobot
npm/@turf/helpers@7.1.0 None +1 151 kB mdfedderly
npm/@tweenjs/tween.js@23.1.3 None 0 161 kB trusktr
npm/@types/aws-lambda@8.10.143 None 0 166 kB types
npm/@types/eslint-config-prettier@6.11.3 None 0 2.77 kB types
npm/@types/eslint@8.56.11 None +2 250 kB types
npm/@types/google.maps@3.55.12 None 0 644 kB types
npm/@types/gtag.js@0.0.20 None 0 9.1 kB types
npm/@types/inquirer-autocomplete-prompt@3.0.3 None 0 6.31 kB types
npm/@types/inquirer@9.0.7 None +1 77 kB types
npm/@types/lint-staged@13.3.0 None 0 3.58 kB types
npm/@types/luxon@3.4.2 None 0 120 kB types
npm/@types/node@20.16.1 None 0 2.1 MB types
npm/@types/papaparse@5.3.14 None 0 24.1 kB types
npm/@types/pg@8.11.6 None 0 16.1 kB types
npm/@types/probe-image-size@7.2.5 None +1 21.9 kB types
npm/@types/react-dom@18.3.0 None 0 37.8 kB types
npm/@types/react@18.3.4 None +1 444 kB types
npm/@types/terraformer__wkt@2.0.3 None +1 11.1 kB types
npm/@types/yargs@17.0.33 None +1 69.1 kB types
npm/@typescript-eslint/eslint-plugin@7.18.0 None +8 5.43 MB jameshenry
npm/@typescript-eslint/parser@7.18.0 None +4 1.4 MB jameshenry
npm/@vercel/analytics@1.3.1 None 0 199 kB vercel-release-bot
npm/@vercel/edge-config@1.2.1 environment, network +1 169 kB vercel-release-bot
npm/@vercel/kv@2.0.0 environment Transitive: network +1 453 kB vercel-release-bot
npm/@vercel/ncc@0.38.1 filesystem, unsafe 0 16.6 MB vercel-release-bot
npm/@vercel/postgres-kysely@0.9.0 Transitive: environment, network +2 452 kB vercel-release-bot
npm/@vercel/speed-insights@1.0.12 None 0 282 kB vercel-release-bot
npm/@welldone-software/why-did-you-render@8.0.3 None 0 332 kB vzaidman
npm/ahooks@3.8.1 None +1 836 kB taoweng
npm/ajv-errors@3.0.0 None 0 53.2 kB esp
npm/alex@11.0.1 None +3 64.5 kB wooorm

🚮 Removed packages: npm/@aws-sdk/client-cognito-identity-provider@3.632.0, npm/dotenv@16.4.5, npm/escape-string-regexp@5.0.0, npm/eslint-config-prettier@9.1.0, npm/jiti@1.21.6, npm/ms@2.1.3, npm/p-queue@8.0.1, npm/prettier@3.3.3, npm/react-dom@18.3.1, npm/react@18.3.1, npm/resolve-pkg-maps@1.0.0, npm/typescript@5.5.4, npm/yargs@17.7.2, npm/zod-to-json-schema@3.23.2, npm/zod@3.23.8

View full report↗︎

github-actions[bot] commented 2 months ago

📦 Next.js Bundle Analysis for @weareinreach/app

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

relativeci[bot] commented 2 months ago

#1288 Bundle Size — 3.49MiB (~+0.01%).

fd92215(current) vs d5072bb dev#1279(baseline)

[!WARNING] Bundle contains 5 duplicate packages – View duplicate packages

Bundle metrics  Change 2 changes Regression 1 regression
                 Current
#1288		      Baseline
#1279
Regression  Initial JS 3.06MiB(~+0.01%) 3.06MiB
No change  Initial CSS 9.54KiB 9.54KiB
Change  Cache Invalidation 68.25% 60.75%
No change  Chunks 67 67
No change  Assets 80 80
No change  Modules 2013 2013
No change  Duplicate Modules 361 361
No change  Duplicate Code 10.03% 10.03%
No change  Packages 159 159
No change  Duplicate Packages 5 5

Bundle size by type  Change 2 changes Regression 2 regressions
|            |       Current
[#1288](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs?utm_source=github&utm_medium=pr-report "View bundle analysis report") |      Baseline
[#1279](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1279-pGA6Yn8Ibdd4NnD7sQBK?utm_source=github&utm_medium=pr-report "View baseline bundle analysis report") | |:--|--:|--:| | Regression  [JS](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-1_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View JS assets") | `3.37MiB` (`~+0.01%`) | `3.37MiB` | | No change  [Fonts](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-1_ft.HTML-0_ft.OTHER-0%22%7D "View Fonts assets") | `94.54KiB` | `94.54KiB` | | No change  [CSS](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs/assets?ba=%7B%22filters%22%3A%22ft.CSS-1_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View CSS assets") | `9.54KiB` | `9.54KiB` | | Regression  [Other](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-0_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-1%22%7D "View Other assets") | `8.68KiB` (`+0.02%`) | `8.68KiB` | | No change  [IMG](https://app.relative-ci.com/projects/lv8Dwq77xc3pShDq86Dg/jobs/1288-wGEYgiM4SLsH5yBzGJJs/assets?ba=%7B%22filters%22%3A%22ft.CSS-0_ft.JS-0_ft.IMG-1_ft.MEDIA-0_ft.FONT-0_ft.HTML-0_ft.OTHER-0%22%7D "View IMG assets") | `8.57KiB` | `8.57KiB` |

Bundle analysis report Branch renovate/all-minor-patch Project dashboard

Generated by RelativeCI Documentation Report issue

alwaysmeticulous[bot] commented 2 months ago

🤖 No test run has been triggered as your Meticulous project has been deactivated (since you haven't viewed any test results in a while). Click here to reactivate.

Last updated for commit fd92215. This comment will update as new commits are pushed.

socket-security[bot] commented 2 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/@prisma/client@4.9.0
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@prisma/engines@5.0.0
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@prisma/engines@5.3.1
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@prisma/engines@5.14.0-dev.34
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@vercel/speed-insights@1.0.12
  • Install script: postinstall
  • Source: node scripts/postinstall.mjs
 🚫
Install scripts npm/@snaplet/seed@0.98.0
  • Install script: postinstall
  • Source: node ./scripts/postinstall.js
 🚫
Install scripts npm/@sentry/cli@2.33.1
  • Install script: postinstall
  • Source: node ./scripts/install.js
 🚫
Install scripts npm/@prisma/client@5.18.0
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@prisma/engines@5.18.0
  • Install script: postinstall
  • Source: node scripts/postinstall.js
 🚫
Install scripts npm/@sentry/profiling-node@8.26.0
  • Install script: install
  • Source: node scripts/check-build.js
 🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/@prisma/client@4.9.0
  • @SocketSecurity ignore npm/@prisma/engines@5.0.0
  • @SocketSecurity ignore npm/@prisma/engines@5.3.1
  • @SocketSecurity ignore npm/@prisma/engines@5.14.0-dev.34
  • @SocketSecurity ignore npm/@vercel/speed-insights@1.0.12
  • @SocketSecurity ignore npm/@snaplet/seed@0.98.0
  • @SocketSecurity ignore npm/@sentry/cli@2.33.1
  • @SocketSecurity ignore npm/@prisma/client@5.18.0
  • @SocketSecurity ignore npm/@prisma/engines@5.18.0
  • @SocketSecurity ignore npm/@sentry/profiling-node@8.26.0
sonarcloud[bot] commented 2 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud