⬆️(deps): Bump the security-updates group across 1 directory with 9 updates #24
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…pdates Bumps the security-updates group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@contentful/rich-text-html-renderer](https://github.com/contentful/rich-text) | `17.0.1` | `17.1.3` | | [@contentful/rich-text-types](https://github.com/contentful/rich-text) | `17.0.1` | `17.2.2` | | [@sentry/nextjs](https://github.com/getsentry/sentry-javascript) | `9.30.0` | `10.12.0` | | [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.16` | `0.5.18` | | [contentful](https://github.com/contentful/contentful.js) | `11.7.2` | `11.7.19` | | [geist](https://github.com/vercel/geist-font/tree/HEAD/packages/next) | `1.4.2` | `1.5.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.522.0` | `0.544.0` | | [shadcn](https://github.com/shadcn/ui/tree/HEAD/packages/shadcn) | `2.7.0` | `3.3.1` | | [web-vitals](https://github.com/GoogleChrome/web-vitals) | `5.0.3` | `5.1.0` | Updates `@contentful/rich-text-html-renderer` from 17.0.1 to 17.1.3 - [Release notes](https://github.com/contentful/rich-text/releases) - [Changelog](https://github.com/contentful/rich-text/blob/master/CHANGELOG.md) - [Commits](https://github.com/contentful/rich-text/compare/@contentful/[email protected]...@contentful/[email protected]) Updates `@contentful/rich-text-types` from 17.0.1 to 17.2.2 - [Release notes](https://github.com/contentful/rich-text/releases) - [Changelog](https://github.com/contentful/rich-text/blob/master/CHANGELOG.md) - [Commits](https://github.com/contentful/rich-text/compare/@contentful/[email protected]...@contentful/[email protected]) Updates `@sentry/nextjs` from 9.30.0 to 10.12.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@9.30.0...10.12.0) Updates `@tailwindcss/typography` from 0.5.16 to 0.5.18 - [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss-typography@v0.5.16...v0.5.18) Updates `contentful` from 11.7.2 to 11.7.19 - [Release notes](https://github.com/contentful/contentful.js/releases) - [Commits](contentful/contentful.js@v11.7.2...v11.7.19) Updates `geist` from 1.4.2 to 1.5.1 - [Release notes](https://github.com/vercel/geist-font/releases) - [Commits](https://github.com/vercel/geist-font/commits/1.5.1/packages/next) Updates `lucide-react` from 0.522.0 to 0.544.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.544.0/packages/lucide-react) Updates `shadcn` from 2.7.0 to 3.3.1 - [Release notes](https://github.com/shadcn/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn/ui/commits/[email protected]/packages/shadcn) Updates `web-vitals` from 5.0.3 to 5.1.0 - [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md) - [Commits](GoogleChrome/web-vitals@v5.0.3...v5.1.0) --- updated-dependencies: - dependency-name: "@contentful/rich-text-html-renderer" dependency-version: 17.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@contentful/rich-text-types" dependency-version: 17.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: "@sentry/nextjs" dependency-version: 10.12.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: security-updates - dependency-name: "@tailwindcss/typography" dependency-version: 0.5.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: contentful dependency-version: 11.7.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security-updates - dependency-name: geist dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: lucide-react dependency-version: 0.544.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates - dependency-name: shadcn dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: security-updates - dependency-name: web-vitals dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security-updates ... Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security-updates group with 9 updates in the / directory:
17.0.117.1.317.0.117.2.29.30.010.12.00.5.160.5.1811.7.211.7.191.4.21.5.10.522.00.544.02.7.03.3.15.0.35.1.0Updates
@contentful/rich-text-html-rendererfrom 17.0.1 to 17.1.3Release notes
Sourced from
@contentful/rich-text-html-renderer's releases.Commits
1f010fdchore(release): updated release notes and package versions [ci skip]b218716fix(rich-text-types): add .js extension for esm [] (#926)9c1b97dchore(release): updated release notes and package versions [ci skip]22245f0fix: bundle issues after swc migration [TOL-3396] (#924)2184719chore: bump@lingui/corefrom 5.3.3 to 5.4.1 in the lingui group (#917)b5a4e81chore: bump@types/nodefrom 24.3.0 to 24.3.1 (#916)2907954chore: bump lint-staged from 16.1.5 to 16.1.6 (#918)15175d6chore: bump rollup from 4.50.0 to 4.50.1 (#920)7a30b51chore(release): updated release notes and package versions [ci skip]b6782a9feat: migrate to swc and use lingui for i18n [TOL-3288] (#914)Updates
@contentful/rich-text-typesfrom 17.0.1 to 17.2.2Release notes
Sourced from
@contentful/rich-text-types's releases.Commits
1f010fdchore(release): updated release notes and package versions [ci skip]b218716fix(rich-text-types): add .js extension for esm [] (#926)9c1b97dchore(release): updated release notes and package versions [ci skip]22245f0fix: bundle issues after swc migration [TOL-3396] (#924)2184719chore: bump@lingui/corefrom 5.3.3 to 5.4.1 in the lingui group (#917)b5a4e81chore: bump@types/nodefrom 24.3.0 to 24.3.1 (#916)2907954chore: bump lint-staged from 16.1.5 to 16.1.6 (#918)15175d6chore: bump rollup from 4.50.0 to 4.50.1 (#920)7a30b51chore(release): updated release notes and package versions [ci skip]b6782a9feat: migrate to swc and use lingui for i18n [TOL-3288] (#914)Updates
@sentry/nextjsfrom 9.30.0 to 10.12.0Release notes
Sourced from
@sentry/nextjs's releases.... (truncated)
Changelog
Sourced from
@sentry/nextjs's changelog.... (truncated)
Commits
a3a070brelease: 10.12.0bbafac0Merge pull request #17670 from getsentry/prepare-release/10.12.0ce1c0a5meta(changelog): Update changelog for 10.12.0dde442cMerge pull request #17660 from getsentry/prepare-release/10.12.0c076017meta(changelog): Update changelog for 10.12.0dd17203fix(core): Fix error handling when sending envelopes (#17662)e8d255fRevert "feat(cloudflare): Introduce lock instrumentation for `context.waitUnt...57b0656ref(browser): ImprovefetchTransporterror handling (#17661)41cec5btest: Adjust node test runner to avoid timeouts (#17663)108ed16test(sveltekit): Pin E2E test app SvelteKit versions and fix failing tests (#...Updates
@tailwindcss/typographyfrom 0.5.16 to 0.5.18Release notes
Sourced from
@tailwindcss/typography's releases.Changelog
Sourced from
@tailwindcss/typography's changelog.Commits
b316f950.5.18ed95206Fix variable declaration in opacity function (#403)7efcb4a0.5.17e0ec248chore(ci): update actions for release insiders511afcbAdd modifiers for description list elements (#357)042a531Addprose-picturemodifiers (#367)f822222Fixkbdshadow colors not being calculated on oklch colors (#387)ecb7e87Add Tailwind v4 custom color theme example to README (#396)ecb7d5cRemove lodash dependencies (#402)b7cdf1eClarify 'not-prose' usage when using prefixes (#399)Updates
contentfulfrom 11.7.2 to 11.7.19Release notes
Sourced from contentful's releases.
... (truncated)
Commits
003f2edbuild(deps): bump@contentful/content-source-maps(#2563)ba5ba87build(deps): bump axios in the production-dependencies group (#2561)8cf5f3bbuild(deps): bump axios in the production-dependencies group (#2560)2a0b3a7build(deps): bump@contentful/content-source-maps(#2553)9f39966build(deps-dev): bump vite from 7.0.6 to 7.1.5 (#2557)913e5c1build(deps): bump@contentful/content-source-maps(#2552)65d2ea7build(deps): bump@contentful/content-source-maps(#2550)ac2ee46build(deps): trigger release (#2548)095b246chore(dependency): update vitest to placate dependabot [DX-291] (#2547)d7929a0chore(dependencies): fix critical axios and other security vulnerabilities (#...Updates
geistfrom 1.4.2 to 1.5.1Release notes
Sourced from geist's releases.
Commits
0c8b56eUpdate verson to 1.5.1Updates
lucide-reactfrom 0.522.0 to 0.544.0Release notes
Sourced from lucide-react's releases.
... (truncated)
Commits
e71198dchore: icon alias improvements (#2861)Updates
shadcnfrom 2.7.0 to 3.3.1Release notes
Sourced from shadcn's releases.
... (truncated)
Changelog
Sourced from shadcn's changelog.
... (truncated)
Commits
1289192chore(release): version packages (#8231)75dde2efix(shadcn): deps in cts projects (#8229)b9f3ce1chore(release): version packages (#8217)cdf58befeat(shadcn): fix transformCssVars function (#8186)fae1a81fix(shadcn): fix async imports not being transformed (#8036)fc6d909add getRegistriesIndex (#8216)275e3a2chore(release): version packages (#8151)e5402f9feat(shadcn): implement recursive registry namespaces (#8147)0805751chore(release): version packages (#8143)9c5eb0dfeat(shadcn): add support for registries index (#8128)Updates
web-vitalsfrom 5.0.3 to 5.1.0Changelog
Sourced from web-vitals's changelog.
Commits
1b872cfRelease v5.1.0f6cb466Update CHANGELOG for 5.1.0e5f6e2dRegister visibility-change early (#637)1852851Only finalize LCP on user events (isTrusted=true) (#635)f16c4b4Fallback to default getSelector if custom function is null or undefined (#634)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or u...Description has been truncated