Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the npm_and_yarn group across 3 directories with 9 updates #1

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Nov 13, 2024

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package From To
happy-dom 15.7.4 15.10.2
zod 3.22.2 3.22.3
nuxt 3.11.2 3.12.4
next 14.2.4 14.2.10
vite 5.2.11 5.2.14

Bumps the npm_and_yarn group with 1 update in the /packages/create-wagmi/templates/next directory: next.
Bumps the npm_and_yarn group with 1 update in the /playgrounds/next directory: next.

Updates happy-dom from 15.7.4 to 15.10.2

Release notes

Sourced from happy-dom's releases.

v15.10.2

👷‍♂️ Patch fixes

  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #1585
    • There was a case that was missed with the first patch

v15.10.1

👷‍♂️ Patch fixes

  • Fixes a security vulnerability that allowed for server side code to be executed by a <script> tag - By @​capricorn86 in task #1585

v15.10.0

🎨 Features

  • Adds a new setting called disableSameOriginPolicy that makes it possible to bypass the same-origin policy in fetch requests - By @​OlaviSau in task #1553

v15.9.0

🎨 Features

  • Adds support for "aspect-ratio" to CSSStyleDeclaration - By @​yinm in task #1147

v15.8.5

👷‍♂️ Patch fixes

  • Fixes bug where Node.getRootNode() returned null when it was within a ShadowRoot that previously been disconnected from the Document - By @​capricorn86 in task #1581

v15.8.4

👷‍♂️ Patch fixes

  • Fixes bug where child nodes of HTMLSelectElement and HTMLFormElement had the wrong reference to the parent - By @​capricorn86 in task #1578

v15.8.3

👷‍♂️ Patch fixes

  • Toggle "open" attribute on HTMLDetailsElement when dispatching a click event on a summary element which is a child of the details element - By @​mikedidomizio in task #1534

v15.8.2

👷‍♂️ Patch fixes

  • Use globalThis instead of global to make Happy DOM work in other runtimes such as Cloudflare workers - By @​mattallty in task #1546

v15.8.1

👷‍♂️ Patch fixes

  • Always return Promise<Blob> from ClipboardItem.getType() - By @​ezzatron in task #1538

v15.8.0

👷‍♂️ Patch fixes

  • Adds support for using non-ASCII characters in custom elements when parsing HTML - By @​capricorn86 in task #1079
  • Fixes an issue where getHTML() and getInnerHTML() would return the slotted content of a shadow root before the template, but the template should be the first child - By @​capricorn86 in task #1079
  • Fixes a bug where SVG elements would not be found by getElementsByTagName() - By @​capricorn86 in task #1079
  • Improves performance when creating elements (e.g. during parsing of HTML) - By @​capricorn86 in task #1550
    • Binding all methods to the target scope in Proxies caused a performance hit, so this is now done when calling a method the first time

🎨 Features

  • Adds support for all remaining SVG elements: SVGAnimateElement, SVGAnimateMotionElement, SVGAnimateTransformElement, SVGCircleElement, SVGClipPathElement, SVGDefsElement, SVGDescElement, SVGEllipseElement, SVGFEBlendElement, SVGFEColorMatrixElement, SVGFEComponentTransferElement, SVGFECompositeElement, SVGFEConvolveMatrixElement, SVGFEDiffuseLightingElement, SVGFEDisplacementMapElement, SVGFEDistantLightElement, SVGFEDropShadowElement, SVGFEFloodElement, SVGFEFuncAElement, SVGFEFuncBElement, SVGFEFuncGElement, SVGFEFuncRElement, SVGFEGaussianBlurElement, SVGFEImageElement, SVGFEMergeElement, SVGFEMergeNodeElement, SVGFEMorphologyElement, SVGFEOffsetElement, SVGFEPointLightElement, SVGFESpecularLightingElement, SVGFESpotLightElement, SVGFETileElement, SVGFETurbulenceElement, SVGFilterElement, SVGForeignObjectElement, SVGGElement, SVGImageElement, SVGLineElement, SVGLinearGradientElement, SVGMarkerElement, SVGMaskElement, SVGMetadataElement, SVGMPathElement, SVGPathElement, SVGPatternElement, SVGPolygonElement, SVGPolylineElement, SVGRadialGradientElement, SVGRectElement, SVGScriptElement, SVGSetElement, SVGStopElement, SVGStyleElement, SVGSwitchElement, SVGSymbolElement, SVGTextElement, SVGTextPathElement, SVGTitleElement, SVGTSpanElement, SVGUseElement and SVGViewElement - By @​capricorn86 in task #1079
  • Adds support for DOMMatrix, DOMMatrixReadOnly, DOMPoint and DOMPointReadOnly - By @​capricorn86 in task #1079

... (truncated)

Commits
  • d23834c fix: #1585 Fixes a security vulnerability that allowed for server side code...
  • 5ee0b16 fix: #1585 Fixes security vulnerability that allowed for server side code t...
  • a20dba9 chore: #1542 Adds SECURITY.md file (#1584)
  • 1625d40 feat: #1553 Adds setting disableSameOriginPolicy, to make it possible to by...
  • a78cd8f feat: #1147 Adds support for aspect-ratio to CSSStyleDeclaration (#1537)
  • e6f8b13 fix: #1581 Fixes bug where Node.getRootNode() returned null when it was wi...
  • 38ab960 fix: #1578 Fixes bug where child nodes of HTMLSelectElement and HTMLFormEle...
  • 8f74989 fix: #1534 Toggle open attribute on HTMLDetailsElement when dispatching a c...
  • 7f57469 fix: #1546 Use globalThis instead of global to make Happy DOM work in o...
  • 759b4fb fix: #1538 Always return Promise<Blob> from ClipboardItem.getType() (#1539)
  • Additional commits viewable in compare view

Updates zod from 3.22.2 to 3.22.3

Release notes

Sourced from zod's releases.

v3.22.3

Commits:

  • 1e23990bcdd33d1e81b31e40e77a031fcfd87ce1 Commit
  • 9bd3879b482f139fd03d5025813ee66a04195cdd docs: remove obsolete text about readonly types (#2676)
  • f59be093ec21430d9f32bbcb628d7e39116adf34 clarify datetime ISO 8601 (#2673)
  • 64dcc8e2b16febe48fa8e3c82c47c92643e6c9e3 Update sponsors
  • 18115a8f128680b4526df58ce96deab7dce93b93 Formatting
  • 28c19273658b164c53c149785fa7a8187c428ad4 Update sponsors
  • ad2ee9ccf723c4388158ff6b8669c2a6cdc85643 2718 Updated Custom Schemas documentation example to use type narrowing (#2778)
  • ae0f7a2c15e7741ee1b23c03a3bfb9acebd86551 docs: update ref to discriminated-unions docs (#2485)
  • 2ba00fe2377f4d53947a84b8cdb314a63bbd6dd4 [2609] fix ReDoS vulnerability in email regex (#2824)
  • 1e61d76cdec05de9271fc0df58798ddf9ce94923 3.22.3
Commits

Updates nuxt from 3.11.2 to 3.12.4

Release notes

Sourced from nuxt's releases.

v3.12.4

3.12.4 is the next regularly scheduled patch release.

👉 Changelog

compare changes

🔥 Performance

  • vite: Start warmups after nitro build (#27963)
  • vite: Avoid extra resolve call for resolveId in layers (#27971)
  • kit,nuxt,schema,vite,webpack: Use explicit exports (#27998)

🩹 Fixes

  • schema: Resolve public alias correctly (#27975)
  • nuxt: Omit rendering payload prefetch when noScripts (#27972)
  • nuxt: Add / as fallback if page can't be identified (e6109b226)
  • ui-templates: Validate templates with html-validate (#28024)
  • schema: Don't constrain postcss plugin options (#28045)
  • kit: Remove exports from v4 branch (5c8312e9b)
  • nuxt: Use unhead key for ad-hoc module options (#28088)
  • nuxt: Use native vue-router composables (#28114)
  • kit: Ensure getNuxtVersion returns string (#28125)
  • nuxt: Always prerender at least one page with crawler (#28131)
  • nuxt: Consider doc scroll-padding-top in scrollBehavior (#28083)
  • nuxt: Only warn when useAsyncData returns undefined (#28154)
  • nuxt: Revert change to getCachedData null response (d10cea11b)
  • schema: Don't use app/ as srcDir if it doesn't exist (#28176)
  • kit: Normalise serverDir within layers using v4 compat (#28177)
  • nuxt: Allow getCachedData to return undefined (#28187)
  • nuxt: Use addEventListener to register cookie store listener (#28193)
  • nuxt: Merge route meta properties with scanned meta (#28170)
  • nuxt: Prevent duplicate set-cookie headers (#28211)

💅 Refactors

  • schema,vite,webpack: Rework postcss module loading (#27946)
  • nuxt: Remove _registeredComponents from ssrContext (#27819)
  • nuxt: Use errx to handle dev log traces (#28027)

📖 Documentation

  • Fix link (83bd4fde9)
  • Fix Cloudflare spelling (#27989)
  • Update example to use nuxtApp.runWithContext (#28000)
  • Remove deprecated pending variable from data fetching docs (#28011)
  • Clarify xrsp danger (#28053)
  • Deprecate pending and emphasis undefined (#28113)
  • Update phrasing in route announcer (#28108)
  • Use code groups for install commands in module guide (#28094)
  • Capitalize text (#28056)
  • Mention content in upgrade guide v4 folder structure (#28090)
  • Remove a resolved issue from view transition docs (#28091)
  • Clarify navigateTo is not for nitro routes (#28092)
  • Warn about nested islands (#28062)

... (truncated)

Commits
  • 4a1349f v3.12.4
  • b7da949 fix(nuxt): prevent duplicate set-cookie headers (#28211)
  • 1843ffa refactor(nuxt): use errx to handle dev log traces (#28027)
  • 11264ad fix(nuxt): merge route meta properties with scanned meta (#28170)
  • 2417848 fix(nuxt): use addEventListener to register cookie store listener (#28193)
  • a6af09e fix(nuxt): allow getCachedData to return undefined (#28187)
  • d10cea1 fix(nuxt): revert change to getCachedData null response
  • e21f681 fix(nuxt): only warn when useAsyncData returns undefined (#28154)
  • 46a41ad chore(deps): update vitest to v2.0.3 (3.x) (#28153)
  • a2fd051 chore(deps): update all non-major dependencies (3.x) (#28058)
  • Additional commits viewable in compare view

Updates next from 14.2.4 to 14.2.10

Commits

Updates vite from 5.2.11 to 5.2.14

Release notes

Sourced from vite's releases.

v5.2.14

Please refer to CHANGELOG.md for details.

v5.2.13

Please refer to CHANGELOG.md for details.

v5.2.12

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.2.14 (2024-09-16)

5.2.13 (2024-06-07)

5.2.12 (2024-05-28)

Commits

Updates @nuxt/devtools from 1.3.1 to 1.6.0

Release notes

Sourced from @​nuxt/devtools's releases.

v1.6.0

   🐞 Bug Fixes

    View changes on GitHub

v1.5.2

   🐞 Bug Fixes

    View changes on GitHub

v1.5.1

   🐞 Bug Fixes

    View changes on GitHub

v1.5.0

   🐞 Bug Fixes

    View changes on GitHub

v1.4.2

   🐞 Bug Fixes

    View changes on GitHub

v1.4.1

   🐞 Bug Fixes

    View changes on GitHub

v1.4.0

   🚀 Features

... (truncated)

Changelog

Sourced from @​nuxt/devtools's changelog.

1.6.0 (2024-10-12)

Bug Fixes

1.5.2 (2024-10-02)

Bug Fixes

  • try downgrade vite-plugin-vue-inspector (572a0d6)

1.5.1 (2024-09-23)

Bug Fixes

1.5.0 (2024-09-20)

Bug Fixes

  • avoid using top-level await, fix #723 (29b0e39)
  • disable quicktype schema generation temporary (c1554a3)
  • handle null in deepSync (#729) (8c0efdb)

1.4.2 (2024-09-10)

Bug Fixes

1.4.1 (2024-08-26)

... (truncated)

Commits

Updates rollup from 4.17.2 to 4.24.4

Release notes

Sourced from rollup's releases.

v4.24.4

4.24.4

2024-11-04

Bug Fixes

  • Ensure mutations by handlers in Proxy definitions are always respected when tree-shaking (#5713)

Pull Requests

v4.24.3

4.24.3

2024-10-29

Bug Fixes

  • Slightly reduce memory consumption by specifying fixed array sizes where possible (#5703)

Pull Requests

v4.24.2

4.24.2

2024-10-27

Bug Fixes

  • Add missing build dependency (#5705)

Pull Requests

  • #5705: Fix "Couldn't find package" error when installing rollup using yarn (@​tagattie)

v4.24.1

4.24.1

2024-10-27

Bug Fixes

  • Support running Rollup natively on FreeBSD (#5698)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.24.4

2024-11-04

Bug Fixes

  • Ensure mutations by handlers in Proxy definitions are always respected when tree-shaking (#5713)

Pull Requests

4.24.3

2024-10-29

Bug Fixes

  • Slightly reduce memory consumption by specifying fixed array sizes where possible (#5703)

Pull Requests

4.24.2

2024-10-27

Bug Fixes

  • Add missing build dependency (#5705)

Pull Requests

  • #5705: Fix "Couldn't find package" error when installing rollup using yarn (@​tagattie)

4.24.1

2024-10-27

Bug Fixes

  • Support running Rollup natively on FreeBSD (#5698)

Pull Requests

... (truncated)

Commits

Updates send from 0.18.0 to 0.19.0

Release notes

Sourced from send's releases.

0.19.0

What's Changed

New Contributors

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.0 / 2024-09-10

  • Remove link renderization in html while redirecting
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.


Updates serve-static from 1.15.0 to 1.16.2

Release notes

Sourced from serve-static's releases.

1.16.0

What's Changed

New Contributors

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

  • deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

1.16.0 / 2024-09-10

  • Remove link renderization in html while redirecting
Commits
Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.


Updates next from 14.2.4 to 14.2.10

Commits

Updates next from 14.2.4 to 14.2.10

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 13, 2024
Copy link

socket-security bot commented Nov 13, 2024

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-0505ceb83e branch 2 times, most recently from 48c3009 to 5984655 Compare November 13, 2024 18:30
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-0505ceb83e branch 2 times, most recently from 73d2699 to f2671c3 Compare November 13, 2024 18:50
…updates

Bumps the npm_and_yarn group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `15.7.4` | `15.10.2` |
| [zod](https://github.com/colinhacks/zod) | `3.22.2` | `3.22.3` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `3.11.2` | `3.12.4` |
| [next](https://github.com/vercel/next.js) | `14.2.4` | `14.2.10` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.2.11` | `5.2.14` |

Bumps the npm_and_yarn group with 1 update in the /packages/create-wagmi/templates/next directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /playgrounds/next directory: [next](https://github.com/vercel/next.js).


Updates `happy-dom` from 15.7.4 to 15.10.2
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v15.7.4...v15.10.2)

Updates `zod` from 3.22.2 to 3.22.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/main/CHANGELOG.md)
- [Commits](colinhacks/zod@v3.22.2...v3.22.3)

Updates `nuxt` from 3.11.2 to 3.12.4
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v3.12.4/packages/nuxt)

Updates `next` from 14.2.4 to 14.2.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.4...v14.2.10)

Updates `vite` from 5.2.11 to 5.2.14
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.2.14/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.2.14/packages/vite)

Updates `@nuxt/devtools` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/nuxt/devtools/releases)
- [Changelog](https://github.com/nuxt/devtools/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nuxt/devtools/commits/v1.6.0/packages/devtools)

Updates `rollup` from 4.17.2 to 4.24.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.17.2...v4.24.4)

Updates `send` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.18.0...0.19.0)

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `next` from 14.2.4 to 14.2.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.4...v14.2.10)

Updates `next` from 14.2.4 to 14.2.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v14.2.4...v14.2.10)

---
updated-dependencies:
- dependency-name: happy-dom
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: zod
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: nuxt
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@nuxt/devtools"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-0505ceb83e branch from f2671c3 to 3bdcf8b Compare November 15, 2024 03:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants