[Snyk] Upgrade: , class-variance-authority, next, next-themes, openai-edge #17
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @vercel/og from 0.5.20 to 0.6.2.
See this package in npm: https://www.npmjs.com/package/@vercel/og
- class-variance-authority from 0.4.0 to 0.7.0.
See this package in npm: https://www.npmjs.com/package/class-variance-authority
- next from 13.4.7-canary.1 to 13.5.6.
See this package in npm: https://www.npmjs.com/package/next
- next-themes from 0.2.1 to 0.3.0.
See this package in npm: https://www.npmjs.com/package/next-themes
- openai-edge from 0.5.1 to 0.6.1.
See this package in npm: https://www.npmjs.com/package/openai-edge
See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/1d1580f0-0fb0-4b92-8e5d-4094561670e8?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@vercel/og
from 0.5.20 to 0.6.2 | 3 versions ahead of your current version | 8 months ago
on 2024-01-04
class-variance-authority
from 0.4.0 to 0.7.0 | 10 versions ahead of your current version | a year ago
on 2023-07-17
next
from 13.4.7-canary.1 to 13.5.6 | 179 versions ahead of your current version | a year ago
on 2023-10-18
next-themes
from 0.2.1 to 0.3.0 | 2 versions ahead of your current version | 6 months ago
on 2024-03-13
openai-edge
from 0.5.1 to 0.6.1 | 2 versions ahead of your current version | a year ago
on 2023-05-29
Issues fixed by the recommended upgrade:
SNYK-JS-NEXT-6828456
SNYK-JS-NEXT-7442548
SNYK-JS-ZOD-5925617
SNYK-JS-NEXT-6032387
SNYK-JS-POSTCSS-5926692
Release notes
Package name: class-variance-authority
-
0.7.0 - 2023-07-17
- Upgrade to
-
0.6.1 - 2023-06-26
- Add missing
- Upgrade to
-
0.6.0 - 2023-04-27
-
-
const button = cva([true && "button-base", false && "not-rendered"]);
-
-
0.6.0-canary.0 - 2023-04-27
-
0.5.3 - 2023-04-26
-
-
- @ pfried made their first contribution in #148
- @ totto2727 made their first contribution in #149
-
0.5.3-canary.0 - 2023-04-26
-
0.5.2 - 2023-04-11
- Support for
- @ msonnberger made their first contribution in #138
-
0.5.1 - 2023-04-02
- Support for TypeScript 5 by @ joe-bell in #134
-
0.5.1-canary.0 - 2023-04-02
-
0.5.0 - 2023-04-02
-
0.4.0 - 2022-12-05
-
// components/button.ts
- Upgrade Commitlint by @ joe-bell in #71
- fix: readme example by @ TmLev in #70
- @ TmLev made their first contribution in #70
- @ JeroenReumkens made their first contribution in #76
from class-variance-authority GitHub release notesWhat's Changed
clsx@2.0.0by @ joe-bell in #185Full Changelog: v0.6.1...v0.7.0
What's Changed
licensekey inpackage.jsontypescript@5.1.3by @ joe-bell in #175Full Changelog: v0.6.0...v0.6.1
What's Changed
cx→clsxby @ joe-bell in #152cvanow usesclsxunder-the-hood to concatenate classes with no breaking changes to the current experience and no increase to bundle-size.The existing
cxexport still exists, but as an alias ofclsxBringing additional benefits of:
Provides additional support for booleans and variadic strings within
classorclassNameprops// => 'button-base'
const buttonConsumer = button({ class: [true && "extra-class"] });
// => 'button-base extra-class'
Provides support for object syntax within
classorclassNamepropsFull Changelog: v0.5.3...v0.6.0
What's Changed
fix: issue #147 where map files are not present for esm files by @ pfried in #148
fix: Added explicit undefined type to support exactOptionalPropertyTypes option by @ totto2727 in #149
New Contributors
Full Changelog: v0.5.2...v0.5.3
What's Changed
moduleResolution: bundler(addtypestoexportsfield inpackage.json) by @ msonnberger in #138New Contributors
Full Changelog: v0.5.1...v0.5.2
What's Changed
Full Changelog: v0.4.0...v0.5.0
Support the Project 🖤
cva is a labour of love – I don't get paid to work on this project
Contributions of any size are greatly appreciated 🙏🏼
Ethereum
class-variance-authority@0.5.0
What's Changed
Features
Target Multiple Variant Options within Compound Variants by @ joe-bell and @ JeroenReumkens in #76
import { cva } from "class-variance-authority";
const button = cva("…", {
variants: {
intent: { primary: "…", secondary: "…" },
size: { small: "…", medium: "…" },
},
compoundVariants: [
// Applied via:
//
button({ intent: "primary", size: "medium" })// or
//
button({ intent: "secondary", size: "medium" }){
intent: ["primary", "secondary"],
size: "medium",
class: "…",
},
],
});
Chores
New Contributors
Full Changelog: v0.3.0...v0.4.0
Package name: next
Core Changes
@ mui/icons-materialto the defaultoptimizePackageImportslist: #56801Credits
Huge thanks to @ xiaolou86, @ ztanner, @ sokra, and @ shuding for helping!
No content.
Core Changes
Promise.withResolverspolyfill withDetachedPromise: #56954onLoadingCompleteas deprecated in favor ofonLoad: #56944Misc Changes
fs-extrausage inscripts/: #56917COREPACK_ENABLE_STRICT: 0for create-next-app tests: #56955Credits
Huge thanks to @ janicklas-ralph, @ wyattjoh, @ SukkaW, @ styfle, and @ balazsorban44 for helping!
Core Changes
Credits
Huge thanks to @ dpnolte and @ feedthejim for helping!
Core Changes
dotenv: #38481swc_coretov0.86.1: #56770Credits
Huge thanks to @ JuanM04, @ Andarist, @ feedthejim, and @ kdy1 for helping!
Core Changes
Documentation Changes
Credits
Huge thanks to @ WhoAmIRUS and @ gnoff for helping!
Core Changes
Misc Changes
Credits
Huge thanks to @ ztanner, @ styfle, @ feedthejim, and @ balazsorban44 for helping!
Core Changes
fs.existsSyncto avoid race condition: #56387waitUntilinto the handler: #56404existSynccall: #56419isolateModulestotsconfigwhen extending from tsconfig withverbatimModuleSyntax: #54164verbatimModuleSyntaxto make type imports/exports explicit: #56551server-onlyandclient-only: #56760useParams: #56771x-forwarded-*headers: