Skip to content

[Snyk] Upgrade: , flowbite, flowbite-react, next #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: , flowbite, flowbite-react, next #1

wants to merge 1 commit into from

Conversation

@ingdavann
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@reduxjs/toolkit
from 2.2.3 to 2.2.7 | 4 versions ahead of your current version | 2 months ago
on 2024-07-27
flowbite
from 2.3.0 to 2.5.1 | 4 versions ahead of your current version | a month ago
on 2024-08-05
flowbite-react
from 0.7.8 to 0.10.1 | 4 versions ahead of your current version | 3 months ago
on 2024-06-21
next
from 14.2.3 to 14.2.7 | 4 versions ahead of your current version | 22 days ago
on 2024-08-27

Release notes
Package name: @reduxjs/toolkit
  • 2.2.7 - 2024-07-27

    This bugfix release fixes issues with "TS type portability" errors, improves build artifact tree shaking behavior, and exports some additional TS types.

    Changelog

    TS Type Portability

    We've had a slew of issues reported around "TS type portability" errors, such as:

    The error messages are typically along the lines of:

    Type error: The inferred type of 'configureStore' cannot be named without a reference to '@ reduxjs/toolkit/node_modules/redux'. This is likely not portable. A type annotation is necessary.

    @ aryaemami59 did some deep investigation and concluded these were due to a mixture of using interface instead of type in most places, not pre-bundling our TS typedefs, and not exporting some of the unique symbols we use internally.

    Arya put together a highly detailed writeup and set of fixes in #4467: Fix: TypeScript Type Portability Issues, and that appears to resolve all of those issues we've seen. Thank you!

    Other Changes

    Arya also did significant work to improve RTK's treeshaking, tweaking internal definitions to let bundlers better separate out unused code.

    We've exported additional types like UpdateDefinitions and RetryOptions, per request.

    listenerMiddleware.withTypes() methods now allow passing in an ExtraArgument generic.

    What's Changed

    Full Changelog: v2.2.6...v2.2.7

  • 2.2.6 - 2024-06-29

    This bugfix release:

    • Brings internal useIsomorphicLayoutEffect usage in line with React Redux in React Native environments
    • Exports FetchBaseQueryArgs type
    • Fixes an issue in recent createEntityAdapter sorting perf improvements that could (in specific cases) cause Immer to throw an error

    What's Changed

    Full Changelog: v2.2.5...v2.2.6

  • 2.2.5 - 2024-05-16
  • 2.2.4 - 2024-05-09
  • 2.2.3 - 2024-03-31
from @reduxjs/toolkit GitHub release notes
Package name: flowbite
  • 2.5.1 - 2024-08-05
    • fix plugin import error from the config file
  • 2.5.0 - 2024-08-05
    • added new DataTable plugin and examples
    • minor bug fixes and improvements
  • 2.4.1 - 2024-06-27
    • fix datepicker module declaration naming for TypeScript
  • 2.4.0 - 2024-06-27
    • the datepicker is now a core component of Flowbite and has API methods, events, and options
    • updated the documentation for the datepicker component and related integration guides
    • minor visual bug fixes and improvements
  • 2.3.0 - 2024-02-14
    • added new copy to clipboard component and examples
    • added new JavaScript tab to the documentation examples
    • update dependency to Tailwind CSS v3.4.1
    • fixed carousel component behavior when there’s only one image
    • added new data attribute to set active and inactive classes for tabs
    • Ruby on Rails integration fix for turbo load
    • minor bug fixes and improvements
from flowbite GitHub release notes
Package name: flowbite-react
  • 0.10.1 - 2024-06-21

    Patch Changes

  • 0.10.0 - 2024-06-20

    Minor Changes

    Patch Changes

    What's Changed

    New Contributors

    Full Changelog: https://github.com/themesberg/flowbite-react/compare/flowbite-react@0.9.0...flowbite-react@0.10.0

  • 0.9.0 - 2024-04-16

    Introducing Drawer and Mega menu

    Summary

    Say hello to Drawer and Mega menu!

    These long-awaited components from the vanilla Flowbite library have finally made their way to Flowbite React. Everything you need to get started - including full theme support, and the full set of examples to match the main Flowbite library - are ready at your fingertips.

    Special thank you to @ dhavalveera for your work on Drawer!

    Changes

    • added Drawer component
    • added Mega menu component
  • 0.8.0 - 2024-04-04

    Minor Changes

    • #1344 bf1bdb0 Thanks @ SutuSebastian! - Rework build process using rollup and tsc

      Summary

      In order to bring more performance to the build process of flowbite-react package, we have to consider transpiling the files using other tools rather than tsc, which is very slow.

      After evaluating various tools including tsup, tshy, and bun build, we chose rollup with the esbuild plugin for transpiling due to its performance and flexibility. We continue to use tsc solely for generating *.d.ts declaration files.

      Changes

      • added rollup + esbuild for transpiling files
        • all files in the cjs directory now have .cjs extension
        • all files in the esm directory now have .mjs extension
        • declaration file types (*.d.ts) have been moved from dist/esm to dist/types
      • changed the build output dir from lib to dist
      • created a facade layer for easier management of the content path as well as the plugin
      • fixed turbo repo dependency tree configs in order for apps/web to properly pipe and require the build output of packages/ui in certain script steps such as build and dev

      Breaking changes

      tailwind.config.js content path:

      old: "node_modules/flowbite-react/lib/esm/**/*.js"

      new: "node_modules/flowbite-react/dist/esm/**/*.mjs" - (flowbite.content() returns it)

      Before

      /** @ type {import('tailwindcss').Config} */
module.exports = {
  content: [
    // ...
    "node_modules/flowbite-react/lib/esm/**/*.js",
  ],
  plugins: [
    // ...
    require("flowbite/plugin"),
  ],
};

      After

      const flowbite = require("flowbite-react/tailwind");

      /** @ type {import('tailwindcss').Config} */
      module.exports = {
      content: [
      // ...
      flowbite.content(),
      ],
      plugins: [
      // ...
      flowbite.plugin(),
      ],
      };

      Addresses Issues

      #1326, #1329, #1343

  • 0.7.8 - 2024-04-01

    Patch Changes

from flowbite-react GitHub release notes
Package name: next
  • 14.2.7 - 2024-08-27

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Revert "chore: externalize undici for bundling" (#65727)
    • Refactor internal routing headers to use request meta (#66987)
    • fix(next): add cross origin in react dom preload (#67423)
    • build: upgrade edge-runtime (#67565)
    • GTM dataLayer parameter should take an object, not an array of strings (#66339)
    • fix: properly patch lockfile against swc bindings (#66515)
    • Add deployment id header for rsc payload if present (#67255)
    • Update font data (#68639)
    • fix i18n data pathname resolving (#68947)
    • pages router: ensure x-middleware-cache is respected (#67734)
    • Fix bad modRequest in flight entry manifest #68888
    • Reject next image urls in image optimizer #68628
    • Fix hmr assetPrefix escaping and reuse logic from other files #67983

    Credits

    Huge thanks to @ kjugi, @ huozhi, @ ztanner, @ SukkaW, @ marlier, @ Kikobeats, @ syi0808, @ ijjk, and @ samcx for helping!

  • 14.2.6 - 2024-08-21
  • 14.2.5 - 2024-07-10
  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from next GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
ef0425a 
Snyk has created this PR to upgrade:
  - @reduxjs/toolkit from 2.2.3 to 2.2.7.
    See this package in npm: https://www.npmjs.com/package/@reduxjs/toolkit
  - flowbite from 2.3.0 to 2.5.1.
    See this package in npm: https://www.npmjs.com/package/flowbite
  - flowbite-react from 0.7.8 to 0.10.1.
    See this package in npm: https://www.npmjs.com/package/flowbite-react
  - next from 14.2.3 to 14.2.7.
    See this package in npm: https://www.npmjs.com/package/next

See this project in Snyk:
https://app.snyk.io/org/ingdavann4444/project/d06dca6e-ba6d-413e-be42-c3d5e1f51b55?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel
Copy link

vercel bot commented Sep 18, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nextjs-typescript-full ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 18, 2024 11:15am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ingdavann @snyk-bot