Skip to content

[Snyk] Upgrade: , , , , core-js, fast-glob, glob, next, preact, regenerator-runtime, send, tailwindcss, three #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: , , , , core-js, fast-glob, glob, next, preact, regenerator-runtime, send, tailwindcss, three #2

wants to merge 1 commit into from

Conversation

@XavierMP14
Copy link
Owner

@XavierMP14 XavierMP14 commented Sep 17, 2024

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@markdoc/markdoc
from 0.2.2 to 0.4.0 | 7 versions ahead of your current version | 10 months ago
on 2023-12-01
@tailwindcss/typography
from 0.5.13 to 0.5.14 | 1 version ahead of your current version | a month ago
on 2024-08-07
@types/three
from 0.166.0 to 0.167.2 | 3 versions ahead of your current version | a month ago
on 2024-08-20
@yarnpkg/parsers
from 3.0.0-rc.46 to 3.0.2 | 12 versions ahead of your current version | 4 months ago
on 2024-05-02
core-js
from 3.36.1 to 3.38.1 | 4 versions ahead of your current version | a month ago
on 2024-08-20
fast-glob
from 3.2.7 to 3.3.2 | 8 versions ahead of your current version | 10 months ago
on 2023-11-06
glob
from 7.1.4 to 7.2.3 | 6 versions ahead of your current version | 2 years ago
on 2022-05-15
next
from 14.2.5 to 14.2.6 | 1 version ahead of your current version | a month ago
on 2024-08-21
preact
from 10.6.4 to 10.23.2 | 53 versions ahead of your current version | a month ago
on 2024-08-12
regenerator-runtime
from 0.13.7 to 0.14.0 | 5 versions ahead of your current version | a year ago
on 2023-08-04
send
from 0.17.1 to 0.18.0 | 2 versions ahead of your current version | 2 years ago
on 2022-03-24
tailwindcss
from 3.4.4 to 3.4.10 | 6 versions ahead of your current version | a month ago
on 2024-08-13
three
from 0.166.1 to 0.167.1 | 2 versions ahead of your current version | 2 months ago
on 2024-08-01

Release notes
Package name: @markdoc/markdoc from @markdoc/markdoc GitHub release notes
Package name: @tailwindcss/typography
  • 0.5.14 - 2024-08-07
    • Fix table text alignment (#346)
  • 0.5.13 - 2024-04-26

    Fixed

    • Don't apply margins to <br> elements contained in an <li> in FF (#350)
from @tailwindcss/typography GitHub release notes
Package name: @types/three
  • 0.167.2 - 2024-08-20
  • 0.167.1 - 2024-07-26
  • 0.167.0 - 2024-07-25
  • 0.166.0 - 2024-06-28
from @types/three GitHub release notes
Package name: @yarnpkg/parsers
  • 3.0.2 - 2024-05-02
  • 3.0.1 - 2024-05-02
  • 3.0.0 - 2023-10-22
  • 3.0.0-rc.53 - 2023-10-03
  • 3.0.0-rc.52 - 2023-09-29
  • 3.0.0-rc.51 - 2023-09-17
  • 3.0.0-rc.50 - 2023-08-23
  • 3.0.0-rc.49 - 2023-08-17
  • 3.0.0-rc.48.1 - 2023-07-03
  • 3.0.0-rc.48 - 2023-07-02
  • 3.0.0-rc.47.1 - 2023-06-29
  • 3.0.0-rc.47 - 2023-06-29
  • 3.0.0-rc.46 - 2023-06-22
from @yarnpkg/parsers GitHub release notes
Package name: core-js from core-js GitHub release notes
Package name: fast-glob
  • 3.3.2 - 2023-11-06

    Full Changelog: 3.3.1...3.3.2

    🐛 Bug fixes

    • Handle square brackets as a special character on Windows in escape functions (#425)
    • Keep escaping after brace expansion (#422)
  • 3.3.1 - 2023-07-22

    Full Changelog: 3.3.0...3.3.1

    This release fixes a regression for cases where the ignore option is used with a string (#403, #404).

    The public interface of this package does not support a string as the value for the ignore option since 2018 year (release).

    So, in the next major release, we will reintroduce method implementations that do not involve strings in the ignore option.

  • 3.3.0 - 2023-06-30

    Full Changelog: 3.2.12...3.3.0

    🚀 Improvements

    Method aliases

    New methods (glob, globSync, globStream) have been added in addition to the current methods (default import, sync, stream), which eliminate the need to rename the method when importing. In addition, an async alias has been added for the default import, which makes it possible to use this packet with ESM.

    Method to convert paths to globs

    A new method (convertPathToPattern) has been added in this release to convert a path to a pattern. The primary goal is to enable users to avoid processing Windows paths in each location where this package is used by utilities from third-party packages.

    See more details in the pull request.

    🐛 Bug fixes

    • In the past, we mishandled patterns that contained slashes when the baseNameMatch option was enabled, which went against the documented behavior. (#312)
    • Several problems with matching patterns that contain brace expansion have been resolved. The primary issue solved is when the pattern has duplicate slashes after it is expanded (#394), or the micromatch package does not correctly generate a regular expression (#365).
    • All negative patterns will now have the dot option enabled when matching paths. Previously, the !**/* patterns did not exclude hidden files (start with a dot). (#343)
    • The issue that led to duplicates in the results when overlapping or duplicate patterns were present among the patterns has been fixed. At the moment, we are only talking about leading dot. Other cases are not included. For example, running with the patterns ['./file.md', 'file.md', '*'] will now only include file.md once in the results. (#190)

    📖 Documentation

    A clarifying note has been added for the concurrency option, which provides more detailed information about the Thread Pool utilization.

    ⚙️ Infrastructure

    • The benchmark in CI is now running on Node.js 20.
    • The benchmark now uses the public package bencho instead of an in-house implementation. You may want to try this solution for your packages and provide feedback.

    🥇 New Contributors

  • 3.2.12 - 2022-09-09

    Full Changelog: 3.2.11...3.2.12

    🐛 Bug fixes

    Fixed an issue introduced in 3.2.7 related to incorrect application of patterns to entries with a trailing slash when the entry is not a directory.

    Before changes:

    fg.sync('**/!(*.md)')
// ['file.md', 'a/file.md', 'a/file.txt']

    After fix:

    fg.sync('**/!(*.md)')
// ['a/file.txt']

    Thanks @ AgentEnder for the issue (#357).

    🚀 Improvements

    This release includes performance improvements for the asynchronous method. For this method we now use an asynchronous directory traversal interface instead of using a streaming interface. This gives up to 15% acceleration for medium and large directories. The result depends a lot on hardware.

    You can find the benchmark results for this release in CI here.

    Here are a few of measurements on my laptop:

    ===> Benchmark pattern "*" with 100 launches (regression, async)
    ===> Max stdev: 7 | Retries: 3 | Options: {}

    Name Time, ms Time stdev, % Memory, MB Memory stdev, % Entries Errors Retries
    --------------------- -------- ------------- ---------- --------------- ------- ------ -------
    fast-glob-current.js 4.390 0.252 6.253 0.015 4 0 1
    fast-glob-previous.js 5.653 0.633 6.051 0.056 4 0 1

    ===> Benchmark pattern "**" with 100 launches (regression, async)
    ===> Max stdev: 7 | Retries: 3 | Options: {}

    Name Time, ms Time stdev, % Memory, MB Memory stdev, % Entries Errors Retries
    --------------------- -------- --------<sp...

@snyk-bot
fix: upgrade multiple dependencies with Snyk
6f2929f 
Snyk has created this PR to upgrade:
  - @markdoc/markdoc from 0.2.2 to 0.4.0.
    See this package in npm: https://www.npmjs.com/package/@markdoc/markdoc
  - @tailwindcss/typography from 0.5.13 to 0.5.14.
    See this package in npm: https://www.npmjs.com/package/@tailwindcss/typography
  - @types/three from 0.166.0 to 0.167.2.
    See this package in npm: https://www.npmjs.com/package/@types/three
  - @yarnpkg/parsers from 3.0.0-rc.46 to 3.0.2.
    See this package in npm: https://www.npmjs.com/package/@yarnpkg/parsers
  - core-js from 3.36.1 to 3.38.1.
    See this package in npm: https://www.npmjs.com/package/core-js
  - fast-glob from 3.2.7 to 3.3.2.
    See this package in npm: https://www.npmjs.com/package/fast-glob
  - glob from 7.1.4 to 7.2.3.
    See this package in npm: https://www.npmjs.com/package/glob
  - next from 14.2.5 to 14.2.6.
    See this package in npm: https://www.npmjs.com/package/next
  - preact from 10.6.4 to 10.23.2.
    See this package in npm: https://www.npmjs.com/package/preact
  - regenerator-runtime from 0.13.7 to 0.14.0.
    See this package in npm: https://www.npmjs.com/package/regenerator-runtime
  - send from 0.17.1 to 0.18.0.
    See this package in npm: https://www.npmjs.com/package/send
  - tailwindcss from 3.4.4 to 3.4.10.
    See this package in npm: https://www.npmjs.com/package/tailwindcss
  - three from 0.166.1 to 0.167.1.
    See this package in npm: https://www.npmjs.com/package/three

See this project in Snyk:
https://app.snyk.io/org/xaviermp14/project/2605dddf-bfe6-449e-9088-d5726bddd8c7?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@XavierMP14 @snyk-bot