chore: bump the npm_and_yarn group across 1 directory with 2 updates

dependabot[bot] commented 6 days ago

Bumps the npm_and_yarn group with 2 updates in the / directory: cookie and next-auth.

Updates cookie from 0.5.0 to 0.7.2

Release notes

v0.7.2

Fixed

Fix object assignment of hasOwnProperty (#177) bc38ffd

https://github.com/jshttp/cookie/compare/v0.7.1...v0.7.2

0.7.1

Fixed

Allow leading dot for domain (#174)

Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec

Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

https://github.com/jshttp/cookie/compare/v0.7.0...v0.7.1

0.7.0

perf: parse cookies ~10% faster (#144 by @kurtextrem and #170)

fix: narrow the validation of cookies to match RFC6265 (#167 by @bewinsnw)

fix: add main to package.json for rspack (#166 by @proudparrot2)

https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.0

0.6.0

Add partitioned option

Commits

d19eaa1 0.7.2
bc38ffd Fix object assignment of hasOwnProperty (#177)
cf4658f 0.7.1
6a8b8f5 Allow leading dot for domain (#174)
58015c0 Remove more code and perf wins (#172)
ab057d6 0.7.0
5f02ca8 Migrate history to GitHub releases
a5d591c Migrate history to GitHub releases
51968f9 Skip isNaN
9e7ca51 perf(parse): cache length, return early (#144)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Updates next-auth from 4.24.7 to 4.24.10

Release notes

Sourced from next-auth's releases.

next-auth@4.24.10

What's Changed

fix: functions that return promises must be async by @thomaslindstrom in nextauthjs/next-auth#12105

fix: support AUTH_SECRET for compat with npx auth secret by @balazsorban44 in https://github.com/nextauthjs/next-auth/commit/490a033cf0396fa634bf6636402624643babef5d

Full Changelog: https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.9...next-auth@4.24.10

next-auth@4.24.9

What's Changed

chore(docs): fix typo in WorkOS documentation by @outofgamut in nextauthjs/next-auth#11959

chore(v4): add neon sponsor by @ndom91 in nextauthjs/next-auth#12008

cookie package upgraded by @talyuk in nextauthjs/next-auth#12046

Allow Next.js v15 peer dependency by @thomaslindstrom in nextauthjs/next-auth#12098

await dynamic APIs as per Next.js 15 changes by @balazsorban44 in https://github.com/nextauthjs/next-auth/commit/4d143c51999e96f39b3fe9e0c7da2b070639253c

New Contributors

@outofgamut made their first contribution in nextauthjs/next-auth#11959

@talyuk made their first contribution in nextauthjs/next-auth#12046

@thomaslindstrom made their first contribution in nextauthjs/next-auth#12098

Full Changelog: https://github.com/nextauthjs/next-auth/compare/next-auth@4.24.8...next-auth@4.24.9

Commits

c7ea50d chore(release): bump version [skip ci]
490a033 fix: support AUTH_SECRET for compat with npx auth secret
1e6be72 fix: functions that return promises must be async (#12105)
ddab3cc chore(release): bump version [skip ci]
4d143c5 fix: await dynamic APIs as per Next.js 15 changes
15c046c fix: add Next.js v15 a possible peer dependency (#12098)
696d117 fix: cookie package upgraded (#12046)
c15d9a5 chore(v4): add neon sponsor (#12008)
89a1cce chore(docs): fix typo in WorkOS documentation (#11959)
f2d6a8a docs: redirect contributors page
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/web3privacy/jobs-app/network/alerts).

vercel[bot] commented 6 days ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
jobs-app	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 29, 2024 3:50pm

netlify[bot] commented 6 days ago

Deploy Preview for w3pjobs failed. Why did it fail? →

Name	Link
Latest commit	59949e7f874bd9895818d3b9d2db5a6659b563db
Latest deploy log	https://app.netlify.com/sites/w3pjobs/deploys/672103fea9b96200080d99dc

web3privacy / jobs-app