Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 20, 2022

Bumps next from 11.1.4 to 12.3.1.

Release notes

Sourced from next's releases.

v12.3.1

Core Changes

  • Update react-server-dom-webpack: #40356
  • Fix flight manifest to include all chunks: #40365
  • docs: fix typos: #40342
  • Fix page url for edge routes in app dir: #40361
  • Subresource Integrity for App Directory: #39729
  • Stop build warning about experimental: { esmExternals: 'loose' }: #40377
  • Add template and error file types: #39808
  • Bump styled-jsx for showing displayName: #40411
  • fix(#40388): next/dynamic should only add default loading without suspense: #40397
  • Add missing trace for full reload event: #40393
  • feat(ts): expose AppType: #40391
  • Update dev watcher to ignore more accurately: #40412
  • Add failing case for location throw: #40445
  • Drop legacy RSC handling in client for pages: #40472
  • fix: eslint no-script-component-in-head error url: #40422
  • chore: Update swc: #40292
  • feat(edge): allows configuring Dynamic code execution guard: #39539
  • Rename allowDynamic to unstable_allowDynamic: #40496
  • Don't execute prefetches for bot user agents: #40435
  • Update semver of eslint-plugin-react: #40246
  • Clean up startTransition in Link: #40505
  • docs(README): next.js logo with dark mode: #40223
  • Passing down original sourcemap for flight client loader: #40508
  • next/script: make onLoad concurrent rendering resilient: #40191
  • chore: Update swc: #40520
  • Add missing feature in next-swc: #40550
  • Mask Flight Parameters from Middleware: #39939
  • Unwrap promise with experimental_use: #40575
  • fix(next/router): Prevent query delete in routing when next.config basePath option is truthy: #40566
  • fix(image): handle image imports with high aspect ratio: #40563
  • fix: loosen webpack compilation with fallbackNodePolyfills: false: #40612
  • Adding experimentalAdjustFallback feature to font optimization: #40185
  • fix: handle notFound: true in / with next export: #40592
  • refactor: split up CONTRIBUTING.md: #40515
  • Implement SWC transformer for server and client graphs: #40603
  • Fix edge wasm handling during deploy: #40625
  • Client directive: #40415
  • Remove internal client next api detection: #40646
  • Attach module trace for RSC related errors: #40652
  • Use createFromFetch instead of createFromReadableStream to fetch Flight: #40656
  • Change Flight response content type to application/octet-stream: #40665
  • Send web vitals to Vercel analytics in app: #40669
  • Refactor fetchServerResponse: #40674
  • Port page and layout level API assertions to SWC transform: #40653
  • Ensure smooth scroll is disabled for navigation in new and existing router: #40642
  • Upgrade to latest React experimental: #40672
  • Refine error messages: #40661

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

snyk-bot and others added 30 commits April 20, 2022 19:56
Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 17.0.38 to 18.0.9.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [dotenv](https://github.com/motdotla/dotenv) from 10.0.0 to 16.0.1.
- [Release notes](https://github.com/motdotla/dotenv/releases)
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v10.0.0...v16.0.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/github-script](https://github.com/actions/github-script) from 2b34a689ec86a68d8ab9478298f91d5401337b7d to 6.1.0. This release includes the previously tagged commit.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@2b34a68...7a5c598)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [helmet](https://github.com/helmetjs/helmet) from 4.6.0 to 5.1.0.
- [Release notes](https://github.com/helmetjs/helmet/releases)
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v4.6.0...v5.1.0)

---
updated-dependencies:
- dependency-name: helmet
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps node from 16.13.2-alpine to 18.2.0-alpine.

---
updated-dependencies:
- dependency-name: node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [got](https://github.com/sindresorhus/got) from 11.8.2 to 12.1.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](sindresorhus/got@v11.8.2...v12.1.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 9.1.1 to 14.1.2.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@v9.1.1...v14.1.2)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@primer/react](https://github.com/primer/react) from 34.6.0 to 35.2.2.
- [Release notes](https://github.com/primer/react/releases)
- [Changelog](https://github.com/primer/react/blob/main/CHANGELOG.md)
- [Commits](primer/react@v34.6.0...v35.2.2)

---
updated-dependencies:
- dependency-name: "@primer/react"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…imer/react-35.2.2

Bump @primer/react from 34.6.0 to 35.2.2
…ppeteer-14.1.2

Bump puppeteer from 9.1.1 to 14.1.2
Bumps [@primer/css](https://github.com/primer/css) from 19.4.0 to 20.2.2.
- [Release notes](https://github.com/primer/css/releases)
- [Changelog](https://github.com/primer/css/blob/main/CHANGELOG.md)
- [Commits](primer/css@v19.4.0...v20.2.2)

---
updated-dependencies:
- dependency-name: "@primer/css"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [lint-staged](https://github.com/okonet/lint-staged) from 12.3.3 to 13.0.0.
- [Release notes](https://github.com/okonet/lint-staged/releases)
- [Commits](lint-staged/lint-staged@v12.3.3...v13.0.0)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.5.1 to 3.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@1f8c6b9...eeb10cf)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…actions/setup-node-3.3.0

Bump actions/setup-node from 2.5.1 to 3.3.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2.9.0 to 3.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@7f9d37f...e551b19)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.12.1 to 4.0.4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@f22a7da...923ad83)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…peter-evans/create-pull-request-4.0.4

Bump peter-evans/create-pull-request from 3.12.1 to 4.0.4
…docker/build-push-action-3

Bump docker/build-push-action from 2.9.0 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.31 to 2.1.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1a927e9...27ea8f8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [peter-evans/find-comment](https://github.com/peter-evans/find-comment) from 1.3.0 to 2.
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@d2dae40...1769778)

---
updated-dependencies:
- dependency-name: peter-evans/find-comment
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…github/codeql-action-2.1.12

Bump github/codeql-action from 1.0.31 to 2.1.12
…peter-evans/find-comment-2

Bump peter-evans/find-comment from 1.3.0 to 2
…nt-staged-13.0.0

Bump lint-staged from 12.3.3 to 13.0.0
MarcelRaschke and others added 22 commits June 11, 2022 09:36
…imer/css-20.2.2

Bump @primer/css from 19.4.0 to 20.2.2
…2.0-alpine

Bump node from 16.13.2-alpine to 18.2.0-alpine
Bumps [glob](https://github.com/isaacs/node-glob) from 7.2.0 to 8.0.3.
- [Release notes](https://github.com/isaacs/node-glob/releases)
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](isaacs/node-glob@v7.2.0...v8.0.3)

---
updated-dependencies:
- dependency-name: glob
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…lmet-5.1.0

Bump helmet from 4.6.0 to 5.1.0
…actions/github-script-7a5c598405937d486b0331594b5da2b14db670da

Bump actions/github-script from 2b34a689ec86a68d8ab9478298f91d5401337b7d to 6.1.0
…tenv-16.0.1

Bump dotenv from 10.0.0 to 16.0.1
…1984ffa8b78b6d3

[Snyk] Security upgrade debian from 9.5-slim to 9-slim
…0359c8ec4aaa6fc

[Snyk] Security upgrade debian from 9.5-slim to 9-slim
…e80f836b3fa9107

[Snyk] Security upgrade debian from 9.5-slim to 9-slim
Bumps [husky](https://github.com/typicode/husky) from 7.0.4 to 8.0.1.
- [Release notes](https://github.com/typicode/husky/releases)
- [Commits](typicode/husky@v7.0.4...v8.0.1)

---
updated-dependencies:
- dependency-name: husky
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [@jest/globals](https://github.com/facebook/jest/tree/HEAD/packages/jest-globals) from 27.4.6 to 28.1.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v28.1.1/packages/jest-globals)

---
updated-dependencies:
- dependency-name: "@jest/globals"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@937d244...c3f1317)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.6.0 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@94ab11c...dc7b971)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…st/globals-28.1.1

build(deps-dev): bump @jest/globals from 27.4.6 to 28.1.1
…docker/setup-buildx-action-2

build(deps): bump docker/setup-buildx-action from 1.6.0 to 2
…actions/cache-3.0.4

build(deps): bump actions/cache from 2.1.7 to 3.0.4
…pes/react-18.0.9

Bump @types/react from 17.0.38 to 18.0.9
…sky-8.0.1

Bump husky from 7.0.4 to 8.0.1
Bumps [puppeteer](https://github.com/puppeteer/puppeteer) from 14.1.2 to 15.3.0.
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@v14.1.2...v15.3.0)

---
updated-dependencies:
- dependency-name: puppeteer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
…ppeteer-15.3.0

build(deps): bump puppeteer from 14.1.2 to 15.3.0
Bumps [next](https://github.com/vercel/next.js) from 11.1.4 to 12.3.1.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v11.1.4...v12.3.1)

---
updated-dependencies:
- dependency-name: next
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 20, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 25, 2023

Superseded by #433.

@dependabot dependabot bot closed this Oct 25, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/next-12.3.1 branch October 25, 2023 01:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

3 participants