Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(auth): update all non-major dependencies #1333

Merged
merged 1 commit into from
Jul 19, 2024
Merged

fix(auth): update all non-major dependencies #1333

merged 1 commit into from
Jul 19, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 18, 2024 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Type Update Change OpenSSF
@aws-sdk/client-cognito-identity-provider (source) dependencies minor 3.614.0 -> 3.616.0 OpenSSF Scorecard
@emotion/react (source) peerDependencies minor 11.11.4 -> 11.12.0 OpenSSF Scorecard
@emotion/react (source) devDependencies minor 11.11.4 -> 11.12.0 OpenSSF Scorecard
@emotion/react (source) dependencies minor 11.11.4 -> 11.12.0 OpenSSF Scorecard
@sentry/browser (source) dependencies minor 8.18.0 -> 8.19.0 OpenSSF Scorecard
@sentry/nextjs (source) dependencies minor 8.18.0 -> 8.19.0 OpenSSF Scorecard
@sentry/node (source) dependencies minor 8.18.0 -> 8.19.0 OpenSSF Scorecard
@sentry/opentelemetry (source) dependencies minor 8.18.0 -> 8.19.0 OpenSSF Scorecard
@sentry/profiling-node (source) dependencies minor 8.18.0 -> 8.19.0 OpenSSF Scorecard
@swc/core (source) devDependencies minor 1.6.13 -> 1.7.0 OpenSSF Scorecard
@vercel/edge-config (source) dependencies patch 1.2.0 -> 1.2.1 OpenSSF Scorecard
dayjs (source) peerDependencies patch 1.11.11 -> 1.11.12 OpenSSF Scorecard
dayjs (source) devDependencies patch 1.11.11 -> 1.11.12 OpenSSF Scorecard
dayjs (source) dependencies patch 1.11.11 -> 1.11.12 OpenSSF Scorecard
husky devDependencies patch 9.1.0 -> 9.1.1 OpenSSF Scorecard
i18next (source) peerDependencies patch 23.12.1 -> 23.12.2 OpenSSF Scorecard
i18next (source) devDependencies patch 23.12.1 -> 23.12.2 OpenSSF Scorecard
i18next (source) dependencies patch 23.12.1 -> 23.12.2 OpenSSF Scorecard
msw (source) devDependencies patch 2.3.1 -> 2.3.2 OpenSSF Scorecard
type-fest devDependencies patch 4.22.0 -> 4.22.1 OpenSSF Scorecard

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-cognito-identity-provider)

v3.616.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

emotion-js/emotion (@​emotion/react)

v11.12.0

Compare Source

getsentry/sentry-javascript (@​sentry/browser)

v8.19.0

Compare Source

node --import=@​sentry/node/import app.js


- **feat(node): Do not exit process by default when other `onUncaughtException` handlers are registered in
  `onUncaughtExceptionIntegration` (#​11532)**

In v8, we will no longer exit the node process by default if other uncaught exception handlers have been registered by
the user.

- **Better handling of transaction name for errors**

We improved the way we keep the transaction name for error events, even when spans are not sampled or performance is
disabled.

- feat(fastify): Update scope `transactionName` when handling request (#​11447)
- feat(hapi): Update scope `transactionName` when handling request (#​11448)
- feat(koa): Update scope `transactionName` when creating router span (#​11476)
- feat(sveltekit): Update scope transactionName when handling server-side request (#​11511)
- feat(nestjs): Update scope transaction name with parameterized route (#​11510)

##### Removal/Refactoring of deprecated functionality

- feat(core): Remove `getCurrentHub` from `AsyncContextStrategy` (#​11581)
- feat(core): Remove `getGlobalHub` export (#​11565)
- feat(core): Remove `Hub` class export (#​11560)
- feat(core): Remove most Hub class exports (#​11536)
- feat(nextjs): Remove webpack 4 support (#​11605)
- feat(vercel-edge): Stop using hub (#​11539)

##### Other Changes

- feat: Hoist `getCurrentHub` shim to core as `getCurrentHubShim` (#​11537)
- feat(core): Add default behaviour for `rewriteFramesIntegration` in browser (#​11535)
- feat(core): Ensure replay envelopes are sent in order when offline (#​11413)
- feat(core): Extract errors from props in unkown inputs (#​11526)
- feat(core): Update metric normalization (#​11518)
- feat(feedback): Customize feedback placeholder text color (#​11417)
- feat(feedback): Maintain v7 compat in the @​sentry-internal/feedback package (#​11461)
- feat(next): Handle existing root spans for isolation scope (#​11479)
- feat(node): Ensure tracing without performance (TWP) works (#​11564)
- feat(opentelemetry): Export `getRequestSpanData` (#​11508)
- feat(opentelemetry): Remove otel.attributes in context (#​11604)
- feat(ratelimit): Add metrics rate limit (#​11538)
- feat(remix): Skip span creation for `OPTIONS` and `HEAD` requests. (#​11149)
- feat(replay): Merge packages together & ensure bundles are built (#​11552)
- feat(tracing): Adds span envelope and datacategory (#​11534)
- fix(browser): Ensure pageload trace remains active after pageload span finished (#​11600)
- fix(browser): Ensure tracing without performance (TWP) works (#​11561)
- fix(nextjs): Fix `tunnelRoute` matching logic for hybrid cloud (#​11576)
- fix(nextjs): Remove Http integration from Next.js (#​11304)
- fix(node): Ensure isolation scope is correctly cloned for non-recording spans (#​11503)
- fix(node): Make fastify types more broad (#​11544)
- fix(node): Send ANR events without scope if event loop blocked indefinitely (#​11578)
- fix(tracing): Fixes latest route name and source not updating correctly (#​11533)
- ref(browser): Move browserTracing into browser pkg (#​11484)
- ref(feedback): Configure font size (#​11437)
- ref(feedback): Refactor Feedback types into @​sentry/types and reduce the exported surface area (#​11355)

#### 8.0.0-beta.0

This release failed to publish correctly. Use 8.0.0-beta.1 instead.

#### 8.0.0-alpha.9

This is the eighth alpha release of Sentry JavaScript SDK v8, which includes a variety of breaking changes.

Read the [in-depth migration guide](./MIGRATION.md) to find out how to address any breaking changes in your code.

##### Important Changes

- **feat: Add @​sentry-internal/browser-utils (#​11381)**

A big part of the browser-runtime specific exports of the internal `@sentry/utils` package were moved into a new package
`@sentry-internal/browser-utils`. If you imported any API from `@sentry/utils` (which is generally not recommended but
necessary for some workarounds), please check that your import statements still point to existing exports after
upgrading.

- **feat: Add loader file to node-based SDKs to support ESM monkeypatching (#​11338)**

When using ESM, it is necessary to use a "loader" to be able to instrument certain third-party packages and Node.js API.
The server-side SDKs now ship with a set of ESM loader hooks, that should be used when using ESM. Use them as follows:

```sh
swc-project/swc (@​swc/core)

v1.7.0

Compare Source

Bug Fixes
Documentation

  • (allocator) Mention oxc_allocator (be99ce0)

  • (contributing) Fix deno installation url (#​9249) (ff5bbda)

  • (es/minifier) Add contributing section (e22f3ba)

Features
Miscellaneous Tasks
Performance
Refactor
Testing
Pers
vercel/storage (@​vercel/edge-config)

v1.2.1

Compare Source

Patch Changes

  • 3057a36: gracefully handle when an empty string is supplied as the key

    • get("") will return undefined
    • has("") will return false
    • getAll(["a", ""]) will ignore the empty string
iamkun/dayjs (dayjs)

v1.11.12

Compare Source

Bug Fixes
typicode/husky (husky)

v9.1.1

Compare Source

i18next/i18next (i18next)

v23.12.2

Compare Source

  • fix: Nested translation resolution between languages uses the fallback language for nested translations 2216 by preserving issue fix "lng is undefined when formatter used in $t( )" 1938
mswjs/msw (msw)

v2.3.2

Compare Source

v2.3.2 (2024-07-19)

Bug Fixes
sindresorhus/type-fest (type-fest)

v4.22.1

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@vercel Vercel
Copy link

vercel bot commented Jul 18, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
inreach-app ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 19, 2024 11:03am

@renovate renovate bot requested a review from JoeKarow as a code owner July 18, 2024 04:41
@renovate renovate bot added automerge Enable Kodiak auto-merge dependencies Change in project dependencies. kodiak: merge.method = 'squash' Kodiak will squash merge this PR. labels Jul 18, 2024
@coderabbitai coderabbitai
Copy link
Contributor

coderabbitai bot commented Jul 18, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@relativeci RelativeCI
Copy link

relativeci bot commented Jul 18, 2024 •
edited
Loading

#969 Bundle Size — 3.5MiB (~+0.01%).

fa0454d(current) vs 4b33d7a dev#964(baseline)

Warning

Bundle contains 5 duplicate packages – View duplicate packages

Warning

Bundle introduced one new package: @vercel/speed-insights – View changed packages

Bundle metrics  Change 4 changes Regression 2 regressions
                 Current
#969		      Baseline
#964
Regression  Initial JS 3.07MiB(~+0.01%) 3.07MiB
No change  Initial CSS 9.54KiB 9.54KiB
Change  Cache Invalidation 66.2% 33.51%
No change  Chunks 64 64
No change  Assets 77 77
No change  Modules 2054 2054
No change  Duplicate Modules 340 340
Change  Duplicate Code 9.41%(-0.11%) 9.42%
Regression  Packages 209(+0.48%) 208
No change  Duplicate Packages 5 5
Bundle size by type  Change 2 changes Regression 1 regression Improvement 1 improvement
                 Current
#969		      Baseline
#964
Regression  JS 3.38MiB (~+0.01%) 3.38MiB
No change  Fonts 94.54KiB 94.54KiB
No change  CSS 9.54KiB 9.54KiB
Improvement  Other 9.07KiB (-0.2%) 9.09KiB
No change  IMG 8.57KiB 8.57KiB

Bundle analysis report Branch renovate/all-minor-patch Project dashboard

@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented Jul 18, 2024 •
edited
Loading

📦 Next.js Bundle Analysis for @weareinreach/app

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

@alwaysmeticulous alwaysmeticulous
Copy link

alwaysmeticulous bot commented Jul 18, 2024 •
edited
Loading

🤖 No test run has been triggered as your Meticulous project has been deactivated (since you haven't viewed any test results in a while). Click here to reactivate.

Last updated for commit fa0454d. This comment will update as new commits are pushed.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 33e35b4 to e0b6a92 Compare July 18, 2024 12:43
@renovate renovate bot changed the title chore(ui): update dependency @swc/core to v1.7.0 chore(ui): update all non-major dependencies Jul 18, 2024
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e0b6a92 to 41ed97c Compare July 18, 2024 15:54
@socket-security Socket Security
Copy link

socket-security bot commented Jul 18, 2024 •
edited
Loading

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@opentelemetry/[email protected] None 0 1.22 MB pichlermarc
npm/@terraformer/[email protected] None 0 92.6 kB jgravois
npm/@trpc/[email protected] environment 0 713 kB katt
npm/@types/[email protected] None 0 166 kB types
npm/@types/[email protected] None 0 9.1 kB types
npm/@types/[email protected] None 0 120 kB types
npm/@types/[email protected] None 0 1.97 MB types
npm/@vercel/[email protected] filesystem, unsafe 0 16.6 MB vercel-release-bot
npm/[email protected] None 0 67.9 kB tjmoses
npm/[email protected] None 0 669 kB iamkun
npm/[email protected] None 0 12 kB jkoops
npm/[email protected] None 0 636 kB adrai, jamuhl
npm/[email protected] None 0 4.94 kB angus-c
npm/[email protected] None 0 5.93 kB angus-c
npm/[email protected] None 0 8.27 MB catamphetamine
npm/[email protected] None 0 4.33 MB icambron
npm/[email protected] None 0 11.3 kB sindresorhus
npm/[email protected] None 0 20.9 kB simov
npm/[email protected] None 0 186 kB gkucmierz
npm/[email protected] None 0 119 kB sindresorhus

🚮 Removed packages: npm/[email protected]

View full report↗︎

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 41ed97c to 2ea4ae0 Compare July 18, 2024 16:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2ea4ae0 to a5ec262 Compare July 18, 2024 19:25
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from a5ec262 to 92ed1ff Compare July 18, 2024 21:16
@renovate renovate bot changed the title chore(ui): update all non-major dependencies fix(auth): update all non-major dependencies Jul 18, 2024
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 92ed1ff to 116e8eb Compare July 19, 2024 03:19
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 116e8eb to 0fe5e2c Compare July 19, 2024 08:34
@socket-security Socket Security
Copy link

socket-security bot commented Jul 19, 2024 •
edited
Loading

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/[email protected]
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
 🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate
fix(auth): update all non-major dependencies
fa0454d 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 0fe5e2c to fa0454d Compare July 19, 2024 10:58
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Jul 19, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@kodiakhq kodiakhq bot merged commit f4ffa78 into dev Jul 19, 2024
21 of 23 checks passed
@kodiakhq kodiakhq bot deleted the renovate/all-minor-patch branch July 19, 2024 14:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@JoeKarow JoeKarow JoeKarow approved these changes

Assignees
No one assigned
Labels
📦 analytics 📦 api 📦 app 📦 auth automerge Enable Kodiak auto-merge 📦 db dependencies Change in project dependencies. kodiak: merge.method = 'squash' Kodiak will squash merge this PR. 📦 ui 📦 util 📦 web
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@JoeKarow