chore(deps): lock file maintenance everything #321

renovate · 2024-06-10T09:44:05Z

This PR contains the following updates:

Package	Type	Update	Change
		lockFileMaintenance	All locks refreshed
@cloudflare/workers-types	devDependencies	minor	`^4.20240423.0` -> `^4.20240605.0`
@sanity/client (source)	dependencies	minor	`6.15.20` -> `6.19.1`
@sanity/ui (source)	dependencies	minor	`2.1.4` -> `2.3.1`
@tanstack/react-table (source)	dependencies	minor	`8.16.0` -> `8.17.3`
@types/react (source)	devDependencies	minor	`^18.2.79` -> `^18.3.3`
eslint-config-next (source)	devDependencies	patch	`^14.2.2` -> `^14.2.3`
wrangler (source)	devDependencies	minor	`^3.51.2` -> `^3.60.0`
bun-types (source)	dependencies	patch	`1.1.4` -> `1.1.12`
cloudflare/wrangler-action	action	minor	`v3.4.1` -> `v3.6.1`
next (source)	dependencies	patch	`14.2.2` -> `14.2.3`
oven-sh/setup-bun	action	digest	`8f24390` -> `f4d14e0`
prettier (source)	devDependencies	minor	`^3.2.5` -> `^3.3.1`
react-dom (source)	dependencies	minor	`18.2.0` -> `18.3.1`
tailwindcss (source)	devDependencies	patch	`^3.4.3` -> `^3.4.4`
styled-components (source)	dependencies	patch	`6.1.8` -> `6.1.11`
@sanity/semantic-release-preset (source)	devDependencies	patch	`^4.1.7` -> `^4.1.8`
prettier-plugin-tailwindcss	devDependencies	minor	`^0.5.14` -> `^0.6.2`
zod (source)	dependencies	patch	`3.23.4` -> `3.23.8`

🔧 This Pull Request updates lock files to use the latest dependency versions.

Release Notes

cloudflare/workerd (@cloudflare/workers-types)

sanity-io/client (@sanity/client)

`v6.19.1`

Compare Source

Bug Fixes

types: adjust action types to reflect Actions API (#830) (e116c62)

`v6.19.0`

Compare Source

Features

add actions API in client (#818) (03c15a9)

`v6.18.3`

Compare Source

Bug Fixes

deps: update dependency get-it to ^8.5.0 (#824) (f4fc8f6)

`v6.18.2`

Compare Source

Bug Fixes

deps: update dependency get-it to ^8.4.30 (#811) (6598ce8)

`v6.18.1`

Compare Source

Bug Fixes

race condition in client.listen memory leak (#805) (d2e468a)

`v6.18.0`

Compare Source

Features

add experimental new live events API (#797) (de0cec7)

`v6.17.3`

Compare Source

Bug Fixes

deps: update dependency get-it to ^8.4.29 (#796) (7cfec3e)

`v6.17.2`

Compare Source

Bug Fixes

stega: remove try/catch block from stegaClean (#788) (06aaad2)

`v6.17.1`

Compare Source

Bug Fixes

deps: update dependency @vercel/stega to v0.1.2 (#784) (7297ead)
deps: update dependency get-it to v8.4.28 (#786) (47985fc)
prevent listener leak on unsubscribe before eventsource module load (#783) (f38b64e)

`v6.17.0`

Compare Source

Features

update SanityProject to include metadata.cliInitializedAt (#779) (77bf6f6)

`v6.16.0`

Compare Source

Features

add stegaClean method, deprecate vercelStegaCleanAll (#773) (2749586)

Bug Fixes

deps: update dependency @vercel/stega to v0.1.1 (#771) (aea84ce)

sanity-io/ui (@sanity/ui)

`v2.3.1`

Compare Source

Bug Fixes

deps: update dependency @sanity/icons to ^3.2.0 (#1342) (1a09676)

`v2.3.0`

Compare Source

Features

deprecate useForwardedRef (#1324) (62146b6)

`v2.2.0`

Compare Source

Features

card: add muted property (f70bff6)

`v2.1.14`

Compare Source

Bug Fixes

deps: update dependency @sanity/icons to v3 (#1322) (b1b31c0)

`v2.1.13`

Compare Source

Bug Fixes

deps: update dependency react-refractor to ^2.2.0 (#1316) (a156277)

`v2.1.12`

Compare Source

Bug Fixes

deps: update dependency @floating-ui/react-dom to ^2.1.0 (#1309) (c0d4ee7)

`v2.1.11`

Compare Source

Bug Fixes

pin framer-motion to an earlier version (#1302) (0960b29)

`v2.1.10`

Compare Source

Bug Fixes

deps: update dependency framer-motion to v11.2.3 (#1300) (d4b319f)

`v2.1.9`

Compare Source

Bug Fixes

deps: update dependency framer-motion to v11.2.2 (#1298) (398151a)

`v2.1.8`

Compare Source

Bug Fixes

deps: update dependency framer-motion to v11.2.0 (#1296) (8627815)

`v2.1.7`

Compare Source

Bug Fixes

menu: remove use of isElement (68f9620)

`v2.1.6`

Compare Source

Bug Fixes

deps: update dependency @floating-ui/react-dom to ^2.0.9 (#1281) (c7148d8)

`v2.1.5`

Compare Source

Bug Fixes

theme: align disabled input colors with button colors (98710cc)
theme: improve avatar colors (4bbb42a)
theme: improve code and muted colors (1e33341)
theme: use correct base bg for avatar (618c194)

TanStack/table (@tanstack/react-table)

`v8.17.3`

Compare Source

Version 8.17.3 - 5/14/2024, 2:44 PM

Changes

Fix

Add a missing guard for undefined in the getFilteredRowModel function. (#5555) (5411f1a) by @jjh2613

Packages

`v8.17.0`

Compare Source

Version 8.17.0 - 5/12/2024, 7:21 PM

Changes

Feat

Angular adapter for TanStack Table (#5326) (#5432) (91f4360) by Kevin Van Cott

Chore

repo package upgrades (#5513) (8630fee) by Kevin Van Cott

Docs

example code of Deep Keys in column-deps (#5547) (c1085a6) by taro
Document getAutoFilterFn in column-filtering.md (#5510) (b1d29b4) by @geryogam
Update tables.md (#5534) (58f7991) by @naughton
update column defs page title (eae4d0f) by Kevin Vandy
update overview (b803962) by Kevin Vandy
header and column docs (#5531) (102ffd2) by Kevin Van Cott
rename data guide (64ef24c) by Kevin Vandy
fix links (ec1ab03) by Kevin Vandy
data and header group docs (#5526) (72ab26a) by Kevin Van Cott
create cells guide (#5523) (e80b802) by Kevin Van Cott
rows guide (#5515) (c7c4419) by Kevin Van Cott
typos in pagination.md (#5508) (ed37903) by @geryogam
typos in column-filtering.md (#5509) (2afa14b) by @geryogam
start faceting docs and filter example reorg (#5507) (289eca3) by Kevin Van Cott
docs pages are breaking due to diff in markdown (#5503) (365e0e9) by @KushagraMehta

Other

Fix filters-fuzzy URL (#5520) (4fda521) by Joe Greve

Packages

vercel/next.js (eslint-config-next)

`v14.2.3`

Compare Source

cloudflare/workers-sdk (wrangler)

`v3.60.0`

Compare Source

Minor Changes

#5878 1e68fe5 Thanks @IgorMinar! - feat: add experimental support for hybrid Node.js compatibility

This feature is experimental and not yet available for general consumption.

Use a combination of workerd Node.js builtins (behind the experimental:nodejs_compat_v2 flag) and
Unenv polyfills (configured to only add those missing from the runtime) to provide a new more effective
Node.js compatibility approach.
#5988 e144f63 Thanks @RamIdeas! - feature: rename the wrangler secret:bulk command to wrangler secret bulk

The old command is now deprecated (but still functional) and will be removed in a future release. The new command is now more consistent with the rest of the wrangler CLI commands.
#5989 35b1a2f Thanks @RamIdeas! - feature: rename wrangler kv:... commands to wrangler kv ...

The old commands are now deprecated (but still functional) and will be removed in a future release. The new commands are now more consistent with the rest of the wrangler CLI commands.
#5861 1cc52f1 Thanks @zebp! - feat: allow for Pages projects to upload sourcemaps

Pages projects can now upload sourcemaps for server bundles to enable remapped stacktraces in realtime logs when deployed with upload_source_map set to true in wrangler.toml.

Patch Changes

#5939 21573f4 Thanks @penalosa! - refactor: Adds the experimental flag --x-dev-env which opts in to using an experimental code path for wrangler dev and wrangler dev --remote. There should be no observable behaviour changes when this flag is enabled.
#5934 bac79fb Thanks @dbenCF! - fix: Update create KV namespace binding details message for easier implementation
#5927 6f83641 Thanks @CarmenPopoviciu! - fix: Clean pages dev terminal ouput

This work includes a series of improvements to the pages dev terminal output, in an attempt to make this output more structured, organised, cleaner, easier to follow, and therefore more helpful for our users <3
#5960 e648825 Thanks @petebacondarwin! - fix: avoid injecting esbuild watch stubs into production Worker code

When we added the ability to include additional modules in the deployed bundle of a Worker,
we inadvertently also included some boiler plate code that is only needed at development time.

This fix ensures that this code is only injected if we are running esbuild in watch mode
(e.g. wrangler dev) and not when building for deployment.

It is interesting to note that this boilerplate only gets included in the production code
if there is an import of CommonJS code in the Worker, which esbuild needs to convert to an
ESM import.

Fixes #4269
Updated dependencies [ab95473]:
- [email protected]

`v3.59.0`

Compare Source

Minor Changes

#5963 bf803d7 Thanks @Skye-31! - Feature: Add support for hiding the "unsafe" fields are experimental warning using an environment variable

By setting WRANGLER_DISABLE_EXPERIMENTAL_WARNING to any truthy value, these warnings will be hidden.

Patch Changes

Updated dependencies [bdbb7f8]:
- [email protected]

`v3.58.0`

Compare Source

Minor Changes

#5933 93b98cb Thanks @WalshyDev! - feature: allow for writing authentication details per API environment. This allows someone targetting staging to have their staging auth details saved separately from production, this saves them logging in and out when switching environments.

Patch Changes

#5938 9e4d8bc Thanks @threepointone! - fix: let "assets" in wrangler.toml be a string

The experimental "assets" field can be either a string or an object. However the type definition marks it only as an object. This is a problem because we use this to generate the json schema, which gets picked up by vscode's even better toml extension, and shows it to be an error when used with a string (even though it works fine). The fix is to simply change the type definition to add a string variant.
#5758 8e5e589 Thanks @Jackenmen! - fix: use correct type for AI binding instead of unknown
Updated dependencies [e0e7725]:
- [email protected]

`v3.57.2`

Compare Source

Patch Changes

#5905 53f22a0 Thanks @penalosa! - fix: Remove WARP certificate injection. Instead, you should ensure that any custom certificates that are needed are included in NODE_EXTRA_CA_CERTS.
#5930 57daae0 Thanks @WalshyDev! - chore: improve error message when updating secret for a non-deployed latest version.
#5703 a905f31 Thanks @penalosa! - fix: Don't use ExportedHandler["middleware"] for injecting middleware
Updated dependencies [64ccdd6, 4458a9e]:
- [email protected]

`v3.57.1`

Compare Source

Patch Changes

#5859 f2ceb3a Thanks @w-kuhn! - fix: queue consumer max_batch_timeout should accept a 0 value
#5862 441a05f Thanks @CarmenPopoviciu! - fix: wrangler pages deploy should fail if deployment was unsuccessful

If a Pages project fails to deploy, wrangler pages deploy will log
an error message, but exit successfully. It should instead throw a
FatalError.
#5812 d5e00e4 Thanks @thomasgauvin! - fix: remove Hyperdrive warning for local development.

Hyperdrive bindings are now supported when developing locally with Hyperdrive. We should update our logs to reflect this.
#5626 a12b031 Thanks @RamIdeas! - chore: ignore workerd output (error: CODE_MOVED) not intended for end-user devs

`v3.57.0`

Compare Source

Minor Changes

#5696 7e97ba8 Thanks @geelen! - feature: Improved d1 execute --file --remote performance & added support for much larger SQL files within a single transaction.
#5819 63f7acb Thanks @CarmenPopoviciu! - fix: Show feedback on Pages project deployment failure

Today, if uploading a Pages Function, or deploying a Pages project fails for whatever reason, there’s no feedback shown to the user. Worse yet, the shown message is misleading, saying the deployment was successful, when in fact it was not:
```
✨ Deployment complete!
```
This commit ensures that we provide users with:
- the correct feedback with respect to their Pages deployment
- the appropriate messaging depending on the status of their project's deployment status
- the appropriate logs in case of a deployment failure
#5814 2869e03 Thanks @CarmenPopoviciu! - fix: Display correct global flags in wrangler pages --help

Running wrangler pages --help will list, amongst others, the following global flags:
```
-j, --experimental-json-config
-c, --config
-e, --env
-h, --help
-v, --version
```
This is not accurate, since flags such as --config, --experimental-json-config, or env are not supported by Pages.

This commit ensures we display the correct global flags that apply to Pages.
#5818 df2daf2 Thanks @WalshyDev! - chore: Deprecate usage of the deployment object on the unsafe metadata binding in favor of the new version_metadata binding.

If you're currently using the old binding, please move over to the new version_metadata binding by adding:
```
[version_metadata]
binding = "CF_VERSION_METADATA"
```
and updating your usage accordingly. You can find the docs for the new binding here: https://developers.cloudflare.com/workers/runtime-apis/bindings/version-metadata

Patch Changes

#5838 609debd Thanks @petebacondarwin! - fix: update undici to the latest version to avoid a potential vulnerability
#5832 86a6e09 Thanks @petebacondarwin! - fix: do not allow non-string values in bulk secret uploads

Prior to Wrangler 3.4.0 we displayed an error if the user tried to upload a
JSON file that contained non-string secrets, since these are not supported
by the Cloudflare backend.

This change reintroduces that check to give the user a helpful error message
rather than a cryptic workers.api.error.invalid_script_config error code.

`v3.56.0`

Compare Source

Minor Changes

#5712 151bc3d Thanks @penalosa! - feat: Support mtls_certificates and browser bindings when using wrangler.toml with a Pages project

Patch Changes

#5813 9627cef Thanks @GregBrimble! - fix: Upload Pages project assets with more grace
- Reduces the maximum bucket size from 50 MiB to 40 MiB.
- Reduces the maximum asset count from 5000 to 2000.
- Allows for more retries (with increased sleep between attempts) when encountering an API gateway failure.
Updated dependencies [0725f6f, 89b6d7f]:
- [email protected]

`v3.55.0`

Compare Source

Minor Changes

#5570 66bdad0 Thanks @sesteves! - feature: support delayed delivery in the miniflare's queue simulator.

This change updates the miniflare's queue broker to support delayed delivery of messages, both when sending the message from a producer and when retrying the message from a consumer.

Patch Changes

#5740 97741db Thanks @WalshyDev! - chore: log "Version ID" in wrangler deploy, wrangler deployments list, wrangler deployments view and wrangler rollback to support migration from the deprecated "Deployment ID". Users should update any parsing to use "Version ID" before "Deployment ID" is removed.
#5754 f673c66 Thanks @RamIdeas! - fix: when using custom builds, the wrangler dev proxy server was sometimes left in a paused state

This could be observed as the browser loading indefinitely, after saving a source file (unchanged) when using custom builds. This is now fixed by ensuring the proxy server is unpaused after a short timeout period.
Updated dependencies [66bdad0, 9b4af8a]:
- [email protected]

`v3.53.1`

Compare Source

Patch Changes

#5091 6365c90 Thanks @Cherry! - fix: better handle dashes and other invalid JS identifier characters in wrangler types generation for vars, bindings, etc.

Previously, with the following in your wrangler.toml, an invalid types file would be generated:
```
[vars]
some-var = "foobar"
```
Now, the generated types file will be valid:
```
interface Env {
	"some-var": "foobar";
}
```
#5748 27966a4 Thanks @penalosa! - fix: Load sourcemaps relative to the entry directory, not cwd.
#5746 1dd9f7e Thanks @petebacondarwin! - fix: suggest trying to update Wrangler if there is a newer one available after an unexpected error
#5226 f63e7a5 Thanks @DaniFoldi! - fix: remove second Wrangler banner from wrangler dispatch-namespace rename

`v3.53.0`

Compare Source

Minor Changes

#5604 327a456 Thanks @dario-piotrowicz! - feat: add support for environments in getPlatformProxy

allow getPlatformProxy to target environments by allowing users to specify an environment option

Example usage:
```
const { env } = await getPlatformProxy({
	environment: "production",
});
```

Patch Changes

#5705 4097759 Thanks @G4brym! - Add staging flag to AI binding

`v3.52.0`

Compare Source

Minor Changes

#5666 81d9615 Thanks @CarmenPopoviciu! - fix: Fix Pages config validation around Durable Objects

Today Pages cannot deploy Durable Objects itself. For this reason it is mandatory that when declaring Durable Objects bindings in the config file, the script_name is specified. We are currently not failing validation if
script_name is not specified but we should. These changes fix that.

Patch Changes

#5610 24840f6 Thanks @SuperchupuDev! - Mark ts-json-schema-generator as a dev dependency
#5669 a7e36d5 Thanks @dario-piotrowicz! - fix: fix broken Durable Object local proxying (when no cf property is present)

A regression was introduced in wrangler 3.46.0 (https://github.com/cloudflare/workers-sdk/pull/5215)
which made it so that missing Request#cf properties are serialized as "undefined", this in turn
throws a syntax parse error when such values are parsed via JSON.parse breaking the communication
with Durable Object local proxies. Fix such issue by serializing missing Request#cf properties as
"{}" instead.
#5616 c6312b5 Thanks @webbertakken! - fix: broken link to durable object migrations docs
#5482 1b7739e Thanks @DaniFoldi! - docs: show new Discord url everywhere for consistency. The old URL still works, but https://discord.cloudflare.com is preferred.
Updated dependencies [3a0d735, 1b7739e]:
- [email protected]
- @cloudflare/kv-asset-handler @0.3.2

oven-sh/bun (bun-types)

`v1.1.12`

Compare Source

[`v1.1.11`](https://togithub.com/oven-sh/bun/

Configuration

📅 Schedule: Branch creation - "every 12 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

socket-security · 2024-06-10T09:44:33Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@cloudflare/[email protected]	None	`0`	3.67 MB	wrangler-publisher
npm/@sanity/[email protected]	Transitive: environment, network	`+25`	7.46 MB	sanity-io
npm/@sanity/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	`+221`	31.6 MB	sanity-io
npm/@sanity/[email protected]	Transitive: environment	`+33`	12 MB	sanity-io
npm/@tanstack/[email protected]	Transitive: environment	`+1`	4.04 MB	tannerlinsley
npm/@types/[email protected]	None	`+1`	2.04 MB	types
npm/@types/[email protected]	None	`0`	2.06 MB	types
npm/@types/[email protected]	None	`+2`	1.69 MB	types
npm/[email protected]	None	`+1`	385 kB	robobun
npm/[email protected]	unsafe Transitive: environment, eval, filesystem, shell	`+208`	53.1 MB	vercel-release-bot
npm/[email protected]	environment, filesystem, network, shell, unsafe	`+23`	1.2 GB	vercel-release-bot
npm/[email protected]	None	`0`	0 B
npm/[email protected]	environment, filesystem, unsafe	`0`	8.25 MB	prettier-bot
npm/[email protected]	environment	`+3`	4.63 MB	react-bot
npm/[email protected]	environment	`+12`	3.42 MB	probablyup
npm/[email protected]	environment, filesystem Transitive: network, shell, unsafe	`+101`	14 MB	adamwathan
npm/[email protected]	Transitive: environment, filesystem, network, shell, unsafe	`+74`	793 MB
npm/[email protected]	None	`0`	667 kB	colinmcd94

🚮 Removed packages: npm/@cloudflare/[email protected], npm/@sanity/[email protected], npm/@sanity/[email protected], npm/@sanity/[email protected], npm/@tanstack/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

socket-security · 2024-06-10T09:44:36Z

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

stipsan · 2024-06-10T09:49:00Z

@SocketSecurity ignore-all

renovate bot requested a review from a team as a code owner June 10, 2024 09:44

renovate bot added 📦 deps 🤖 bot labels Jun 10, 2024

chore(deps): lock file maintenance everything

d90ebc9

renovate bot force-pushed the renovate/everything branch from fcfd17f to d90ebc9 Compare June 10, 2024 09:46

stipsan approved these changes Jun 10, 2024

View reviewed changes

stipsan merged commit 346d2d0 into main Jun 10, 2024
7 checks passed

stipsan deleted the renovate/everything branch June 10, 2024 09:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): lock file maintenance everything #321

chore(deps): lock file maintenance everything #321

renovate bot commented Jun 10, 2024 •

edited

Loading

socket-security bot commented Jun 10, 2024 •

edited

Loading

socket-security bot commented Jun 10, 2024 •

edited

Loading

stipsan commented Jun 10, 2024

chore(deps): lock file maintenance everything #321

chore(deps): lock file maintenance everything #321

Conversation

renovate bot commented Jun 10, 2024 • edited Loading

Release Notes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Changes

Fix

Packages

Changes

Feat

Chore

Docs

Other

Packages

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

[v1.1.11](https://togithub.com/oven-sh/bun/

Configuration

socket-security bot commented Jun 10, 2024 • edited Loading

socket-security bot commented Jun 10, 2024 • edited Loading

Next steps

stipsan commented Jun 10, 2024

renovate bot commented Jun 10, 2024 •

edited

Loading

[`v1.1.11`](https://togithub.com/oven-sh/bun/

socket-security bot commented Jun 10, 2024 •

edited

Loading

socket-security bot commented Jun 10, 2024 •

edited

Loading