-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
deps(example): Bump the dependencies group in /examples/nextjs-14-clerk-rl with 8 updates #497
Conversation
Bumps the dependencies group in /examples/nextjs-14-clerk-rl with 8 updates: | Package | From | To | | --- | --- | --- | | [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `4.29.9` | `4.29.10` | | [next](https://github.com/vercel/next.js) | `14.1.3` | `14.1.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.2.65` | `18.2.74` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.2.21` | `18.2.24` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.18` | `10.4.19` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `14.1.3` | `14.1.4` | | [postcss](https://github.com/postcss/postcss) | `8.4.35` | `8.4.38` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss) | `3.4.1` | `3.4.3` | Updates `@clerk/nextjs` from 4.29.9 to 4.29.10 - [Release notes](https://github.com/clerk/javascript/releases) - [Changelog](https://github.com/clerk/javascript/blob/@clerk/nextjs@4.29.10/packages/nextjs/CHANGELOG.md) - [Commits](https://github.com/clerk/javascript/commits/@clerk/nextjs@4.29.10/packages/nextjs) Updates `next` from 14.1.3 to 14.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v14.1.3...v14.1.4) Updates `@types/react` from 18.2.65 to 18.2.74 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.2.21 to 18.2.24 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `autoprefixer` from 10.4.18 to 10.4.19 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.18...10.4.19) Updates `eslint-config-next` from 14.1.3 to 14.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v14.1.4/packages/eslint-config-next) Updates `postcss` from 8.4.35 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.35...8.4.38) Updates `tailwindcss` from 3.4.1 to 3.4.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.3/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss@v3.4.1...v3.4.3) --- updated-dependencies: - dependency-name: "@clerk/nextjs" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: next dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/react" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/react-dom" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: autoprefixer dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: eslint-config-next dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: postcss dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tailwindcss dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Merging to
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@clerk/nextjs@4.29.9, npm/@types/react-dom@18.2.21, npm/@types/react@18.2.65, npm/autoprefixer@10.4.18, npm/eslint-config-next@14.1.3, npm/next@14.1.3, npm/postcss@8.4.35, npm/tailwindcss@3.4.1 |
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat are floating dependencies?Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version. Packages should specify properly semver ranges to avoid version conflicts. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
|
@dependabot rebase |
Superseded by #506. |
Bumps the dependencies group in /examples/nextjs-14-clerk-rl with 8 updates:
4.29.9
4.29.10
14.1.3
14.1.4
18.2.65
18.2.74
18.2.21
18.2.24
10.4.18
10.4.19
14.1.3
14.1.4
8.4.35
8.4.38
3.4.1
3.4.3
Updates
@clerk/nextjs
from 4.29.9 to 4.29.10Release notes
Sourced from
@clerk/nextjs
's releases.Changelog
Sourced from
@clerk/nextjs
's changelog.Commits
eebb09b
chore(repo): Version packages (#3072)Updates
next
from 14.1.3 to 14.1.4Release notes
Sourced from next's releases.
Commits
f1fc357
v14.1.4e6a117b
(backport) Update React from 60a927d04 to 4b84f1161 (#63476)c227315
update assertion due to stack trace change3aae252
test: switch order of tests to avoid flakniess (#63482)4804982
fix broken create-next-app tests (#63019)81114f3
fix revalidation issue with route handlers (#63213)944a84c
ensure mpa navigations to the same URL work after restoring from bfcache (#63...21e11f1
Ensure PromiseLikeOfReactNode is not included in .d.ts files (#63185)531cdb5
Fix metadata url cases should not append with trailing slash (#63050)a3707f5
feat: adddeploymentId
config (#63198)Updates
@types/react
from 18.2.65 to 18.2.74Commits
Updates
@types/react-dom
from 18.2.21 to 18.2.24Commits
Updates
autoprefixer
from 10.4.18 to 10.4.19Release notes
Sourced from autoprefixer's releases.
Changelog
Sourced from autoprefixer's changelog.
Commits
8060e33
Release 10.4.19 versionfe7bae4
Remove end→flex-end warning5f6f362
Update dependencies13a86df
Move to flat ESLint configb3e0579
Update dependenciesUpdates
eslint-config-next
from 14.1.3 to 14.1.4Release notes
Sourced from eslint-config-next's releases.
Commits
f1fc357
v14.1.4Updates
postcss
from 8.4.35 to 8.4.38Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
a69d45e
Release 8.4.38 version64e35d9
Update dependenciesc1ad8fb
Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...b45e7e9
fix endIndex1bea246
failing test: for endIndex 0 in rangeBy0fd1d86
Add changelog auto release on Github49c906e
Release 8.4.37 versionb5bd92c
Fix another broken prev source map issue2882039
Update dependenciese5ad939
Release 8.4.36 versionUpdates
tailwindcss
from 3.4.1 to 3.4.3Release notes
Sourced from tailwindcss's releases.
Changelog
Sourced from tailwindcss's changelog.
Commits
f1f419a
3.4.3e6c1082
Revert changes to glob handling (#13384)8430d8b
3.4.28b4a2a6
Change dark selector so@apply
works correctly with pseudo elements (#13379)97607f1
Ensure that arbitrary properties respectimportant
configuration (#13353)c033f10
Update CHANGELOG.mdbda8421
Only detect nesting when using@apply
(#13325)3ba51d1
Remove leading space inbox-shadow
'saddDefaults
call (#13334)a53d854
Fix missingxx-large
and remove doublex-large
absolute size (#13324)ea90d3a
Reset letter spacing for form elements (#13150)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions