chore(deps): update all non-major dependencies #1689

renovate · 2024-07-22T22:29:50Z

This PR contains the following updates:

Package	Change	Type	Update
@storybook/addon-essentials (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
@storybook/addon-interactions (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
@storybook/addon-links (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
@storybook/nextjs (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
@storybook/react (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
@tanstack/react-query (source)	`5.51.11` -> `5.51.14`	dependencies	patch
@tanstack/react-query-devtools (source)	`5.51.11` -> `5.51.14`	dependencies	patch
@testing-library/jest-dom	`6.4.6` -> `6.4.8`	devDependencies	patch
husky	`9.1.1` -> `9.1.2`	devDependencies	patch
jotai	`2.9.0` -> `2.9.1`	dependencies	patch
lucide-react (source)	`0.414.0` -> `0.416.0`	dependencies	minor
node (source)	`20.15.1` -> `20.16.0`		minor
postcss (source)	`8.4.39` -> `8.4.40`	devDependencies	patch
storybook (source)	`8.2.5` -> `8.2.6`	devDependencies	patch
tailwindcss (source)	`3.4.6` -> `3.4.7`	devDependencies	patch
typescript (source)	`5.5.3` -> `5.5.4`	devDependencies	patch
vite (source)	`5.3.4` -> `5.3.5`	devDependencies	patch

Release Notes

storybookjs/storybook (@storybook/addon-essentials)

`v8.2.6`

Compare Source

CPC: Fix missing exports for addon-kit - #28691, thanks @ndelangen!

TanStack/query (@tanstack/react-query)

`v5.51.14`

Compare Source

TanStack/query (@tanstack/react-query-devtools)

`v5.51.14`

Compare Source

testing-library/jest-dom (@testing-library/jest-dom)

`v6.4.8`

Compare Source

`v6.4.7`

Compare Source

typicode/husky (husky)

`v9.1.2`

Compare Source

pmndrs/jotai (jotai)

`v2.9.1`

Compare Source

This patch version includes various fixes. Huge thanks to contributors!

What's Changed

refactor(core): follow naming convention by @dai-shi in https://github.com/pmndrs/jotai/pull/2662
refactor(core): store with Object.assign by @dai-shi in https://github.com/pmndrs/jotai/pull/2663
fix(core): atom toString includes debugLabel in dev mode by @dmaskasky in https://github.com/pmndrs/jotai/pull/2659
fix(core): Unmount an atom that is no longer dependent within a derived atom by @nogaten in https://github.com/pmndrs/jotai/pull/2660
fix(types): add undefined initial value to Atom definition by @rtritto in https://github.com/pmndrs/jotai/pull/2668

New Contributors

@rtritto made their first contribution in https://github.com/pmndrs/jotai/pull/2668

Full Changelog: pmndrs/jotai@v2.9.0...v2.9.1

lucide-icons/lucide (lucide-react)

`v0.416.0`: New icons 0.416.0

Compare Source

New icons 🎨

map-pin-check-inside (#2301) by @karsa-mistmere
map-pin-check (#2301) by @karsa-mistmere
map-pin-minus-inside (#2301) by @karsa-mistmere
map-pin-minus (#2301) by @karsa-mistmere
map-pin-plus-inside (#2301) by @karsa-mistmere
map-pin-plus (#2301) by @karsa-mistmere
map-pin-x-inside (#2301) by @karsa-mistmere
map-pin-x (#2301) by @karsa-mistmere

Modified Icons 🔨

map-pin-off (#2301) by @karsa-mistmere
map-pin (#2301) by @karsa-mistmere
map-pinned (#2301) by @karsa-mistmere

`v0.415.0`: New icons 0.415.0

Compare Source

New icons 🎨

square-square (#2241) by @jguddas

nodejs/node (node)

`v20.16.0`

Compare Source

postcss/postcss (postcss)

`v8.4.40`

Compare Source

Moved to getter/setter in nodes types to help Sass team (by @nex3).

tailwindlabs/tailwindcss (tailwindcss)

`v3.4.7`

Compare Source

Microsoft/TypeScript (typescript)

`v5.5.4`

Compare Source

vitejs/vite (vite)

`v5.3.5`

Compare Source

refactor(asset): remove rollup 3 public file watch workaround (#16331) (66bdb1d), closes #16331
fix: make server type less restrictive (fix #17627) (#17628) (b55c32f), closes #17627 #17628
fix: show error if vite client cannot be loaded (#17419) (db5ab1d), closes #17419
fix(build): env output is not stable (#17748) (b240a83), closes #17748
fix(client): fix vite error path (#17744) (3c1bde3), closes #17744
fix(css): resolve url aliases with fragments (fix: #17690) (#17691) (d906d3f)
fix(deps): update all non-major dependencies (#17629) (93281b0), closes #17629
fix(importMetaGlob): handle alias that starts with hash (#17743) (b58b423), closes #17743
fix(ssrTransform): sourcemaps with multiple sources (#17677) (f321fa8), closes #17677
chore: extend commit hash (#17709) (4fc9b64), closes #17709
chore(deps): update all non-major dependencies (#17734) (9983731), closes #17734
chore(deps): update typescript (#17699) (df5ceb3), closes #17699
revert: fix(logger): truncate log over 5000 characters long (#16581) (#17729) (f4f488f), closes #16581 #17729

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2024-07-22T22:29:52Z

Deployment failed with the following error:

Resource is limited - try again in 41 minutes (more than 100, code: "api-deployments-free-per-day").

codesandbox · 2024-07-22T22:29:54Z

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

changeset-bot · 2024-07-22T22:29:54Z

⚠️ No Changeset found

Latest commit: 01059b2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

coderabbitai · 2024-07-22T22:30:02Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai generate interesting stats about this repository and render them as a table.
- @coderabbitai show all the console.log statements in this repository.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

socket-security · 2024-07-22T22:30:58Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@storybook/[email protected]	Transitive: environment, eval, filesystem	`+58`	12 MB	domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/[email protected]	Transitive: environment, eval	`+80`	13.8 MB	domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/[email protected]	None	`+4`	299 kB	domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/[email protected]	environment Transitive: eval, filesystem, network, shell, unsafe	`+535`	63.4 MB	domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/[email protected]	Transitive: environment	`+31`	6.1 MB	domyen, ghengeveld, jreinhold, ...8 more
npm/@tanstack/[email protected]	environment	`+1`	3.44 MB	nksaraf, tannerlinsley
npm/@tanstack/[email protected]	None	`+1`	3.12 MB	nksaraf, tannerlinsley
npm/@testing-library/[email protected]	None	`+17`	2.73 MB	testing-library-bot
npm/[email protected]	None	`0`	4.02 kB	typicode
npm/[email protected]	None	`0`	416 kB	daishi
npm/[email protected]	None	`0`	24.1 MB	ericfennis
npm/[email protected]	Transitive: environment	`+3`	368 kB	ai
npm/[email protected]	Transitive: environment, filesystem, unsafe	`+30`	8.79 MB	adamwathan, malfaitrobin, reinink
npm/[email protected]	None	`0`	21.9 MB	typescript-bot
npm/[email protected]	Transitive: environment, eval, filesystem, shell	`+6`	8.34 MB	antfu, patak, soda, ...2 more

🚮 Removed packages: npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@tanstack/[email protected], npm/@tanstack/[email protected], npm/@testing-library/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

vercel · 2024-07-23T02:44:15Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
next-app-starter	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 26, 2024 10:40am

socket-security · 2024-07-23T02:44:49Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Install scripts	npm/@prisma/[email protected]	Install script: postinstall Source: `node scripts/postinstall.js`	`package.json`	🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/@prisma/[email protected]

renovate-approve bot approved these changes Jul 22, 2024

View reviewed changes

renovate bot force-pushed the renovate/all-minor-patch branch from 224ac16 to 5928dd1 Compare July 23, 2024 02:44

renovate bot changed the title ~~chore(deps): update dependency @testing-library/jest-dom to v6.4.7~~ chore(deps): update all non-major dependencies Jul 23, 2024

vercel bot deployed to Preview July 23, 2024 02:45 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 5928dd1 to c38f0db Compare July 23, 2024 13:16

vercel bot deployed to Preview July 23, 2024 13:17 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from c38f0db to ff636c8 Compare July 24, 2024 13:37

vercel bot deployed to Preview July 24, 2024 13:38 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from ff636c8 to 6c22aea Compare July 24, 2024 22:12

vercel bot deployed to Preview July 24, 2024 22:13 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 6c22aea to 3226466 Compare July 25, 2024 09:42

vercel bot deployed to Preview July 25, 2024 09:45 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from 3226466 to eb92ef9 Compare July 25, 2024 13:47

vercel bot deployed to Preview July 25, 2024 13:48 View deployment

renovate bot force-pushed the renovate/all-minor-patch branch from eb92ef9 to 84097b5 Compare July 25, 2024 15:59

chore(deps): update all non-major dependencies

01059b2

renovate bot force-pushed the renovate/all-minor-patch branch from 84097b5 to 01059b2 Compare July 26, 2024 10:39

vercel bot deployed to Preview July 26, 2024 10:40 View deployment

jellydn merged commit 28becdc into main Jul 26, 2024
17 of 18 checks passed

renovate bot deleted the renovate/all-minor-patch branch July 26, 2024 11:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies #1689

chore(deps): update all non-major dependencies #1689

renovate bot commented Jul 22, 2024 •

edited

Loading

vercel bot commented Jul 22, 2024

codesandbox bot commented Jul 22, 2024

changeset-bot bot commented Jul 22, 2024 •

edited

Loading

coderabbitai bot commented Jul 22, 2024

Review skipped

Chat

CodeRabbit Commands (invoked as PR comments)

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

socket-security bot commented Jul 22, 2024 •

edited

Loading

vercel bot commented Jul 23, 2024 •

edited

Loading

socket-security bot commented Jul 23, 2024 •

edited

Loading

chore(deps): update all non-major dependencies #1689

chore(deps): update all non-major dependencies #1689

Conversation

renovate bot commented Jul 22, 2024 • edited Loading

Release Notes

What's Changed

New Contributors

v0.416.0: New icons 0.416.0

New icons 🎨

Modified Icons 🔨

v0.415.0: New icons 0.415.0

New icons 🎨

Configuration

vercel bot commented Jul 22, 2024

codesandbox bot commented Jul 22, 2024

Review or Edit in CodeSandbox

changeset-bot bot commented Jul 22, 2024 • edited Loading

⚠️ No Changeset found

coderabbitai bot commented Jul 22, 2024

Review skipped

Chat

CodeRabbit Commands (invoked as PR comments)

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

socket-security bot commented Jul 22, 2024 • edited Loading

vercel bot commented Jul 23, 2024 • edited Loading

socket-security bot commented Jul 23, 2024 • edited Loading

Next steps

renovate bot commented Jul 22, 2024 •

edited

Loading

`v0.416.0`: New icons 0.416.0

`v0.415.0`: New icons 0.415.0

changeset-bot bot commented Jul 22, 2024 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

socket-security bot commented Jul 22, 2024 •

edited

Loading

vercel bot commented Jul 23, 2024 •

edited

Loading

socket-security bot commented Jul 23, 2024 •

edited

Loading