Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the production-dependencies group across 1 directory with 8 updates #842

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build(deps): bump the production-dependencies group across 1 directory with 8 updates #842

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2025

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
@astrojs/react 3.6.2 4.1.2
@astrojs/rss 4.0.7 4.0.10
@astrojs/sitemap 3.1.6 3.2.1
@astrojs/tailwind 5.1.1 5.1.4
astro 4.15.9 5.1.1
rollup 4.22.5 4.29.1
sanitize-html 2.13.0 2.14.0
tailwindcss 3.4.13 3.4.17

Updates @astrojs/react from 3.6.2 to 4.1.2

Release notes

Sourced from @​astrojs/react's releases.

@​astrojs/react@​4.1.2

Patch Changes

@​astrojs/react@​4.1.1

Patch Changes

@​astrojs/react@​4.1.0

Minor Changes

@​astrojs/react@​4.0.0

Major Changes

Minor Changes

  • #12539 827093e Thanks @​bluwy! - Drops node 21 support

  • #12510 14feaf3 Thanks @​bholmesdev! - Changes the generated URL query param from _astroAction to _action when submitting a form using Actions. This avoids leaking the framework name into the URL bar, which may be considered a security issue.

@​astrojs/react@​4.0.0-beta.2

Major Changes

Minor Changes

@​astrojs/react@​3.7.0-beta.1

Minor Changes

  • #12510 14feaf3 Thanks @​bholmesdev! - Changes the generated URL query param from _astroAction to _action when submitting a form using Actions. This avoids leaking the framework name into the URL bar, which may be considered a security issue.

@​astrojs/react@​3.6.3

Patch Changes

  • #12481 8a46e80 Thanks @​marbrex! - Resolve vite peer dependency problem for strict package managers like Yarn in PnP mode.

@​astrojs/react@​3.6.3-beta.0

Patch Changes

  • #12481 8a46e80 Thanks @​marbrex! - Resolve vite peer dependency problem for strict package managers like Yarn in PnP mode.
Changelog

Sourced from @​astrojs/react's changelog.

4.1.2

Patch Changes

4.1.1

Patch Changes

4.1.0

Minor Changes

4.0.0

Major Changes

Minor Changes

  • #12539 827093e Thanks @​bluwy! - Drops node 21 support

  • #12510 14feaf3 Thanks @​bholmesdev! - Changes the generated URL query param from _astroAction to _action when submitting a form using Actions. This avoids leaking the framework name into the URL bar, which may be considered a security issue.

4.0.0-beta.2

Major Changes

Minor Changes

3.7.0-beta.1

Minor Changes

  • #12510 14feaf3 Thanks @​bholmesdev! - Changes the generated URL query param from _astroAction to _action when submitting a form using Actions. This avoids leaking the framework name into the URL bar, which may be considered a security issue.

3.6.3

Patch Changes

... (truncated)

Commits

Updates @astrojs/rss from 4.0.7 to 4.0.10

Release notes

Sourced from @​astrojs/rss's releases.

@​astrojs/rss@​4.0.10

Patch Changes

Changelog

Sourced from @​astrojs/rss's changelog.

4.0.10

Patch Changes

4.0.9

Patch Changes

4.0.8

Patch Changes

Commits

Updates @astrojs/sitemap from 3.1.6 to 3.2.1

Release notes

Sourced from @​astrojs/sitemap's releases.

@​astrojs/prism@​3.2.0

Minor Changes

@​astrojs/telemetry@​3.2.0

Minor Changes

@​astrojs/prism@​3.2.0-beta.0

Minor Changes

@​astrojs/telemetry@​3.2.0-beta.0

Minor Changes

Changelog

Sourced from @​astrojs/sitemap's changelog.

3.2.1

Patch Changes

3.2.0

Minor Changes

Commits

Updates @astrojs/tailwind from 5.1.1 to 5.1.4

Release notes

Sourced from @​astrojs/tailwind's releases.

@​astrojs/tailwind@​5.1.4

Patch Changes

@​astrojs/tailwind@​5.1.3

Patch Changes

Changelog

Sourced from @​astrojs/tailwind's changelog.

5.1.4

Patch Changes

5.1.3

Patch Changes

6.0.0-alpha.0

Patch Changes

5.1.2

Patch Changes

  • #12161 8e500f2 Thanks @​delucis! - Adds keywords to package.json to improve categorization in the Astro integrations catalog

6.0.0-alpha.0

Patch Changes

Commits

Updates astro from 4.15.9 to 5.1.1

Release notes

Sourced from astro's releases.

[email protected]

Patch Changes

[email protected]

Minor Changes

  • #12441 b4fec3c Thanks @​ascorbic! - Adds experimental session support

    Sessions are used to store user state between requests for server-rendered pages, such as login status, shopping cart contents, or other user-specific data.

    ---
export const prerender = false; // Not needed in 'server' mode
const cart = await Astro.session.get('cart');
---
<a href="/checkout">🛒 {cart?.length ?? 0} items</a>

    Sessions are available in on-demand rendered/SSR pages, API endpoints, actions and middleware. To enable session support, you must configure a storage driver.

    If you are using the Node.js adapter, you can use the fs driver to store session data on the filesystem:

    // astro.config.mjs
{
  adapter: node({ mode: 'standalone' }),
  experimental: {
    session: {
      // Required: the name of the unstorage driver
      driver: "fs",
    },
  },
}

    If you are deploying to a serverless environment, you can use drivers such as redis, netlify-blobs, vercel-kv, or cloudflare-kv-binding and optionally pass additional configuration options.

    For more information, including using the session API with other adapters and a full list of supported drivers, see the docs for experimental session support. For even more details, and to leave feedback and participate in the development of this feature, the Sessions RFC.

  • #12426 3dc02c5 Thanks @​oliverlynch! - Improves asset caching of remote images

    Astro will now store entity tags and the Last-Modified date for cached remote images and use them to revalidate the cache when it goes stale.

... (truncated)

Changelog

Sourced from astro's changelog.

5.1.1

Patch Changes

5.1.0

Minor Changes

  • #12441 b4fec3c Thanks @​ascorbic! - Adds experimental session support

    Sessions are used to store user state between requests for server-rendered pages, such as login status, shopping cart contents, or other user-specific data.

    ---
export const prerender = false; // Not needed in 'server' mode
const cart = await Astro.session.get('cart');
---
<a href="/checkout">🛒 {cart?.length ?? 0} items</a>

    Sessions are available in on-demand rendered/SSR pages, API endpoints, actions and middleware. To enable session support, you must configure a storage driver.

    If you are using the Node.js adapter, you can use the fs driver to store session data on the filesystem:

    // astro.config.mjs
{
  adapter: node({ mode: 'standalone' }),
  experimental: {
    session: {
      // Required: the name of the unstorage driver
      driver: "fs",
    },
  },
}

    If you are deploying to a serverless environment, you can use drivers such as redis, netlify-blobs, vercel-kv, or cloudflare-kv-binding and optionally pass additional configuration options.

    For more information, including using the session API with other adapters and a full list of supported drivers, see the docs for experimental session support. For even more details, and to leave feedback and participate in the development of this feature, the Sessions RFC.

  • #12426 3dc02c5 Thanks @​oliverlynch! - Improves asset caching of remote images

... (truncated)

Commits

Updates rollup from 4.22.5 to 4.29.1

Release notes

Sourced from rollup's releases.

v4.29.1

4.29.1

2024-12-21

Bug Fixes

  • Fix crash from deoptimized logical expressions (#5771)

Pull Requests

v4.29.0

4.29.0

2024-12-20

Features

  • Treat objects as truthy and always check second argument to better simplify logical expressions (#5763)

Pull Requests

v4.28.1

4.28.1

2024-12-06

Bug Fixes

  • Support running Rollup natively on LoongArch (#5749)
  • Add optional debugId to SourceMap types (#5751)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.29.1

2024-12-21

Bug Fixes

  • Fix crash from deoptimized logical expressions (#5771)

Pull Requests

4.29.0

2024-12-20

Features

  • Treat objects as truthy and always check second argument to better simplify logical expressions (#5763)

Pull Requests

4.28.1

2024-12-06

Bug Fixes

  • Support running Rollup natively on LoongArch (#5749)
  • Add optional debugId to SourceMap types (#5751)

Pull Requests

4.28.0

... (truncated)

Commits
  • 5d37778 4.29.1
  • 86e1f43 fix: do not optimize the literal value if the cache is deoptimized (#5771)
  • f116952 Remove unnecessary lifetimes (#5769)
  • dadd488 4.29.0
  • a4b78eb fix(deps): lock file maintenance minor/patch updates (#5767)
  • d52f00d fix: introduce UnknownFalsyValue for enhancing if statement tree-shaking (#5763)
  • 65c8901 chore(deps): update dependency @​rollup/plugin-node-resolve to v16 (#5766)
  • 7a8ac46 docs: add utf-8 encoding to JSON file reading (#5759)
  • 31f1670 fix(deps): lock file maintenance minor/patch updates (#5760)
  • e60fb1c 4.28.1
  • Additional commits viewable in compare view

Updates sanitize-html from 2.13.0 to 2.14.0

Changelog

Sourced from sanitize-html's changelog.

2.14.0 (2024-12-18)

  • Fix adding text with transformTags in cases where it originally had no text child elements. Thanks to f0x.

2.13.1 (2024-10-03)

  • Fix to allow regex in allowedClasses wildcard whitelist. Thanks to anak-dev.
Commits
  • 1a11f7c eslint
  • 4ae37d9 Merge pull request #687 from apostrophecms/release-2.14.0
  • af62944 release 2.14.0
  • d50f36f Merge pull request #684 from f0x52/transform-new-text1
  • 19e9532 changelog entry
  • de2aefb add testcase for transforming text inside empty tags
  • 98b4900 still add text added by transformation when tag is discarded
  • 20878b9 Merge pull request #678 from apostrophecms/release-2.13.1
  • bf08233 release 2.13.1
  • 4d5c4cb Merge pull request #676 from apostrophecms/thanks-anak-dev
  • Additional commits viewable in compare view

Updates tailwindcss from 3.4.13 to 3.4.17

Release notes

Sourced from tailwindcss's releases.

v3.4.17

Fixed

  • Work around Node v22.12+ issue (#15421)

v3.4.16

Fixed

  • Ensure the TypeScript types for PluginsConfig allow undefined values (#14668)

Changed

  • Bumped lilconfig to v3.x (#15289)

v3.4.15

  • Bump versions for security vulnerabilities (#14697)
  • Ensure the TypeScript types for the boxShadow theme configuration allows arrays (#14856)
  • Set fallback for opacity variables to ensure setting colors with the selection:* variant works in Chrome 131 (#15003)

v3.4.14

Fixed

  • Don't set display: none on elements that use hidden="until-found" (#14625)
Changelog

Sourced from tailwindcss's changelog.

[3.4.17] - 2024-12-17

Fixed

  • Work around Node v22.12+ issue (#15421)

[3.4.16] - 2024-12-03

Fixed

  • Ensure the TypeScript types for PluginsConfig allow undefined values (#14668)

Changed

  • Bumped lilconfig to v3.x (#15289)

[3.4.15] - 2024-11-14

  • Bump versions for security vulnerabilities (#14697)
  • Ensure the TypeScript types for the boxShadow theme configuration allows arrays (#14856)
  • Set fallback for opacity variables to ensure setting colors with the selection:* variant works in Chrome 131 (#15003)

[3.4.14] - 2024-10-15

Fixed

  • Don't set display: none on elements that use hidden="until-found" (#14625)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-dependencies group across 1 director…
c683541 
…y with 8 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) | `3.6.2` | `4.1.2` |
| [@astrojs/rss](https://github.com/withastro/astro/tree/HEAD/packages/astro-rss) | `4.0.7` | `4.0.10` |
| [@astrojs/sitemap](https://github.com/withastro/astro/tree/HEAD/packages/integrations/sitemap) | `3.1.6` | `3.2.1` |
| [@astrojs/tailwind](https://github.com/withastro/astro/tree/HEAD/packages/integrations/tailwind) | `5.1.1` | `5.1.4` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `4.15.9` | `5.1.1` |
| [rollup](https://github.com/rollup/rollup) | `4.22.5` | `4.29.1` |
| [sanitize-html](https://github.com/apostrophecms/sanitize-html) | `2.13.0` | `2.14.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss) | `3.4.13` | `3.4.17` |



Updates `@astrojs/react` from 3.6.2 to 4.1.2
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/react)

Updates `@astrojs/rss` from 4.0.7 to 4.0.10
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro-rss/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/astro-rss)

Updates `@astrojs/sitemap` from 3.1.6 to 3.2.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/sitemap/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/sitemap)

Updates `@astrojs/tailwind` from 5.1.1 to 5.1.4
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/tailwind/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/tailwind)

Updates `astro` from 4.15.9 to 5.1.1
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/[email protected]/packages/astro)

Updates `rollup` from 4.22.5 to 4.29.1
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.22.5...v4.29.1)

Updates `sanitize-html` from 2.13.0 to 2.14.0
- [Changelog](https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md)
- [Commits](apostrophecms/sanitize-html@2.13.0...2.14.0)

Updates `tailwindcss` from 3.4.13 to 3.4.17
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.17/CHANGELOG.md)
- [Commits](tailwindlabs/tailwindcss@v3.4.13...v3.4.17)

---
updated-dependencies:
- dependency-name: "@astrojs/react"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@astrojs/rss"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@astrojs/sitemap"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@astrojs/tailwind"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: astro
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: rollup
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sanitize-html
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tailwindcss
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from krzysztofzuraw as a code owner January 1, 2025 05:58
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2025
@dependabot dependabot bot mentioned this pull request Jan 1, 2025
Closed
@netlify Netlify
Copy link

netlify bot commented Jan 1, 2025 •
edited
Loading

✅ Deploy Preview for flamboyant-stallman-9dcf8d ready!

Name Link
🔨 Latest commit c683541
🔍 Latest deploy log https://app.netlify.com/sites/flamboyant-stallman-9dcf8d/deploys/6774d9704c1c98000848535a
😎 Deploy Preview https://deploy-preview-842--flamboyant-stallman-9dcf8d.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse		 2 paths audited
Performance: 100
Accessibility: 100
Best Practices: 100
SEO: 93
PWA: -
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@krzysztofzuraw krzysztofzuraw Awaiting requested review from krzysztofzuraw krzysztofzuraw is a code owner

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants