Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , , , , , , , , , , , , cheerio, next, pdfjs-dist, react-resizable-panels, rehype-katex, sharp, tesseract.js, tiktoken, zustand #7

Open
wants to merge 1 commit into
base: main-stable
Choose a base branch
from

Conversation

black-da-bull
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@emotion/cache
from 11.11.0 to 11.13.1 | 3 versions ahead of your current version | 2 months ago
on 2024-07-25
@emotion/styled
from 11.11.5 to 11.13.0 | 2 versions ahead of your current version | 2 months ago
on 2024-07-20
@emotion/react
from 11.11.4 to 11.13.3 | 3 versions ahead of your current version | 24 days ago
on 2024-08-21
@mui/icons-material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.15.17 to 5.16.7 | 12 versions ahead of your current version | a month ago
on 2024-08-09
@next/bundle-analyzer
from 14.2.3 to 14.2.6 | 3 versions ahead of your current version | 23 days ago
on 2024-08-21
@next/third-parties
from 14.2.3 to 14.2.6 | 3 versions ahead of your current version | 23 days ago
on 2024-08-21
@prisma/client
from 5.13.0 to 5.18.0 | 421 versions ahead of your current version | a month ago
on 2024-08-06
@t3-oss/env-nextjs
from 0.10.1 to 0.11.0 | 1 version ahead of your current version | 2 months ago
on 2024-07-22
@trpc/client
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/next
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/react-query
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@trpc/server
from 10.44.1 to 10.45.2 | 30 versions ahead of your current version | 6 months ago
on 2024-03-11
@vercel/analytics
from 1.2.2 to 1.3.1 | 2 versions ahead of your current version | 4 months ago
on 2024-05-24
@vercel/speed-insights
from 1.0.10 to 1.0.12 | 2 versions ahead of your current version | 3 months ago
on 2024-06-12
cheerio
from 1.0.0-rc.12 to 1.0.0 | 1 version ahead of your current version | a month ago
on 2024-08-09
next
from 14.1.4 to 14.2.6 | 83 versions ahead of your current version | 23 days ago
on 2024-08-21
pdfjs-dist
from 4.2.67 to 4.5.136 | 3 versions ahead of your current version | 2 months ago
on 2024-07-27
react-resizable-panels
from 2.0.19 to 2.1.1 | 6 versions ahead of your current version | 24 days ago
on 2024-08-21
rehype-katex
from 7.0.0 to 7.0.1 | 1 version ahead of your current version | a month ago
on 2024-08-19
sharp
from 0.33.3 to 0.33.5 | 5 versions ahead of your current version | a month ago
on 2024-08-16
tesseract.js
from 5.1.0 to 5.1.1 | 1 version ahead of your current version | 21 days ago
on 2024-08-24
tiktoken
from 1.0.15 to 1.0.16 | 1 version ahead of your current version | a month ago
on 2024-08-15
zustand
from 4.5.2 to 4.5.5 | 3 versions ahead of your current version | a month ago
on 2024-08-15

Release notes
Package name: @emotion/cache
  • 11.13.1 - 2024-07-25

    Patch Changes

  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

    • Updated dependencies [d8ff8a5, a9f6912]:
      • @ emotion/serialize@1.3.0
      • @ emotion/use-insertion-effect-with-fallbacks@1.1.0
      • @ emotion/utils@1.4.0
  • 11.12.0 - 2024-07-19
  • 11.11.0 - 2023-05-06
from @emotion/cache GitHub release notes
Package name: @emotion/styled
  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

    • Updated dependencies [d8ff8a5, a9f6912]:
      • @ emotion/serialize@1.3.0
      • @ emotion/use-insertion-effect-with-fallbacks@1.1.0
      • @ emotion/utils@1.4.0
  • 11.12.0 - 2024-07-19
  • 11.11.5 - 2024-03-29
from @emotion/styled GitHub release notes
Package name: @emotion/react
  • 11.13.3 - 2024-08-21

    Patch Changes

    • #3232 0ce3ed0 Thanks @ ENvironmentSet! - Distribute css prop attachment over props that are union types

    • Updated dependencies []:

      • @ emotion/serialize@1.3.1
  • 11.13.0 - 2024-07-20

    Minor Changes

    • #3198 d8ff8a5 Thanks @ Andarist! - Migrated away from relying on process.env.NODE_ENV checks to differentiate between production and development builds.

      Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.

      Default files should continue to work in all environments.

    • #3215 a9f6912 Thanks @ Andarist! - Added edge-light and workerd conditions to package.json manifest to better serve users using Vercel Edge and Cloudflare Workers.

    Patch Changes

    • Updated dependencies [d8ff8a5, a9f6912]:
      • @ emotion/serialize@1.3.0
      • @ emotion/use-insertion-effect-with-fallbacks@1.1.0
      • @ emotion/utils@1.4.0
  • 11.12.0 - 2024-07-19
  • 11.11.4 - 2024-02-27
from @emotion/react GitHub release notes
Package name: @mui/icons-material from @mui/icons-material GitHub release notes
Package name: @mui/material
  • 5.16.7 - 2024-08-09

    Aug 9, 2024

    A big thanks to the 3 contributors who made this release possible.

    @ mui/material@5.16.7

    • ​[material-ui][mui-system] Add support for version runtime checks (#43233) @ DiegoAndai

    Docs

    Core

    All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan

  • 5.16.6 - 2024-07-30

    Jul 30, 2024

    A big thanks to the 5 contributors who made this release possible.

    @ mui/material@5.16.6

    • [Divider] Enable borderStyle enhancement in divider with children (#43059) @ anuujj

    Docs

    • [material-ui][Card] Update CardMedia description (#43121) @ shahzaibdev1
    • [material-ui] Replace deprecated <ListItem button/> with ListItemButton component in routing libraries list example (#43114) @ aliharis99
    • [material-ui][Snackbar] Improve close reason type in demos (#43105) @ sai6855

    Core

    All contributors of this release in alphabetical order: @ aliharis99, @ anuujj, @ mnajdova, @ sai6855, @ shahzaibdev1

  • 5.16.5 - 2024-07-25
  • 5.16.4 - 2024-07-16
  • 5.16.3 - 2024-07-16
  • 5.16.2 - 2024-07-16
  • 5.16.1 - 2024-07-11
  • 5.16.0 - 2024-07-05
  • 5.15.21 - 2024-06-28
  • 5.15.20 - 2024-06-12
  • 5.15.19 - 2024-05-29
  • 5.15.18 - 2024-05-16
  • 5.15.17 - 2024-05-08
from @mui/material GitHub release notes
Package name: @next/bundle-analyzer
  • 14.2.6 - 2024-08-21

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Ensure fetch cache TTL is updated properly (#69164)
  • 14.2.5 - 2024-07-10
  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/bundle-analyzer GitHub release notes
Package name: @next/third-parties
  • 14.2.6 - 2024-08-21

    Note

    This release is backporting bug fixes. It does not include all pending features/changes on canary.

    Core Changes

    • Ensure fetch cache TTL is updated properly (#69164)
  • 14.2.5 - 2024-07-10
  • 14.2.4 - 2024-06-11
  • 14.2.3 - 2024-04-24
from @next/third-parties GitHub release notes
Package name: @prisma/client
  • 5.18.0 - 2024-08-06

    🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟

    Highlights

    Native support for UUIDv7

    Previous to this release, the Prisma Schema function uuid() did not accept any arguments and created a UUIDv4 ID. While sufficient in many cases, UUIDv4 has a few drawbacks, namely that it is not temporally sortable.

    UUIDv7 attempts to resolve this issue, making it easy to temporally sort your database rows by ID!

    To support this, we’ve updated the uuid() function in Prisma Schema to accept an optional, integer argument. Right now, the only valid values are 4 and 7, with 4 being the default.

    model User {
    id String @id @default(uuid()) // defaults to 4
    name String
    }

    model User {
    id String @id @default(uuid(4)) // same as above, but explicit
    name String
    }

    model User {
    id String @id @default(uuid(7)) // will use UUIDv7 instead of UUIDv4
    name String
    }

    Bug squashing

    We’ve squashed a number of bugs this release, special thanks to everyone who helped us! A few select highlights are:

    Fixes and improvements

    Prisma

    Language tools (e.g. VS Code)

    Share your feedback about Prisma ORM

    We want to know how you like working with Prisma ORM in your projects! Please take our 2min survey and let us know what you like or where we can improve 🙏

    Credits

    Huge thanks to @ mcuelenaere, @ pagewang0, @ Druue, @ key-moon, @ Jolg42, @ pranayat, @ ospfranco, @ yubrot, @ skyzh, @ haaawk for helping!

  • 5.18.0-integration-revert-24949-fix-ts-version.1 - 2024-08-06
  • 5.18.0-integration-fix-config-dir-client.5 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.4 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.3 - 2024-07-19
  • 5.18.0-integration-fix-config-dir-client.2 - 2024-07-17
  • 5.18.0-integration-fix-config-dir-client.1 - 2024-07-17
  • 5.18.0-integration-feat-typed-sql.9 - 2024-08-05
  • 5.18.0-integration-feat-typed-sql.8 - 2024-08-05
  • 5.18.0-integration-feat-typed-sql.7 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.6 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.5 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.4 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.3 - 2024-08-02
  • 5.18.0-integration-feat-typed-sql.2 - 2024-07-29
  • 5.18.0-integration-feat-typed-sql.1 - 2024-07-29
  • 5.18.0-integration-engines-5-18-0-9-feat-gh-actions-0b3765edade679247b3c9856bcabbcdc1736853e.1 - 2024-07-19
  • 5.18.0-integration-engines-5-18-0-7-feat-gh-actions-462cf67beffd0cc97802a8034d58a38ec9c58b99.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-6-feat-gh-actions-19bafc70f9e564e8f5792bd8a9cd4bad4df5748e.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-5-feat-gh-actions-5f2a1d1133b515a5b4cbf1b17ef011a9fe22b559.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-4-feat-gh-actions-db4307dd3283e239e498436ea27707d22af180f3.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-3-feat-gh-actions-3d6f612a21393259032d9b8630f4b621b4f3c32f.1 - 2024-07-17
  • 5.18.0-integration-engines-5-18-0-26-feat-introspect-sql-4dcdf8b8304815e12f4af0e41837efb42c98e9b7.1 - 2024-08-02
  • 5.18.0-integration-engines-5-18-0-24-integration-fix-d1-int64-46841fc537adb365fc503b23779c98a19ac9835d.2 - 2024-07-31
  • 5.18.0-integration-engines-5-18-0-24-integration-fix-d1-int64-46841fc537adb365fc503b23779c98a19ac9835d.1 - 2024-07-31
  • 5.18.0-integration-engines-5-18-0-20-feat-introspect-sql-b2b600c154792b1859dfb09b93d383681a1b2bf0.1 - 2024-07-29
  • 5.18.0-integration-engines-5-18-0-2-feat-gh-actions-5ed0cbc35ff1fdd02f7d09f7819a213f9b5e6b9f.1 - 2024-07-16
  • 5.18.0-integration-engines-5-18-0-14-integration-test-gh-branch-555baf1ea1fca8f73cebed665b226cf3b8c4798b.2 - 2024-07-22
  • 5.18.0-integration-engines-5-18-0-14-integration-test-gh-branch-555baf1ea1fca8f73cebed665b226cf3b8c4798b.1 - 2024-07-22
  • 5.18.0-integration-engines-5-18-0-12-improve-quaint-column-type-331a7dd91f2553e6a77b58649b55472bca4fa225.1 - 2024-07-22
  • 5.18.0-integration-engines-5-17-0-4-feat-remove-actors-attempt-2-e7f608ab076eda9e1264e600ce3a140f0bc06bbe.1 - 2024-07-31
  • 5.18.0-dev.14 - 2024-08-06
  • 5.18.0-dev.13 - 2024-08-05
  • 5.18.0-dev.12 - 2024-08-05
  • 5.18.0-dev.11 - 2024-08-02
  • 5.18.0-dev.10 - 2024-07-24
  • 5.18.0-dev.9 - 2024-07-24
  • 5.18.0-dev.8 - 2024-07-23
  • 5.18.0-dev.7 - 2024-07-23
  • 5.18.0-dev.6 - 2024-07-22
  • 5.18.0-dev.5 - 2024-07-22
  • 5.18.0-dev.4 - 2024-07-22
  • 5.18.0-dev.3 - 2024-07-22
  • 5.18.0-dev.2 - 2024-07-19
  • 5.18.0-dev.1 - 2024-07-17
  • 5.17.0 - 2024-07-16

    🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟

    Highlights

    VSCode extension improvements

    We’re happy to introduce some cool new features that will make your experience with the Prisma VSCode extension even better!

    Find references across schema files

    The ability to hop between references of a given symbol is really useful in application code and now with the introduction of multi-file schema, we think it’s the perfect time to bring this feature to the VSCode extension!

    With the 5.17.0 release, you’ll now have the ability to use the native “find references” feature to find any usage of a given symbol

    references

    Added context on hover

    When hovering over a symbol that references a view, type, enum, or any other block with multiple values, you’ll now see a handy pop out that shows what is in that block at a glance.

    image

    Additional quick fixes

    We’ve taken some fixes made by the prisma format cli command and made them quick fixes available to the VSCode Extension. Now, when you have forget a back relation or relation scalar field, you’ll now see in real time what is wrong and have the option to fix it via the extension.

    image (1)

    QueryRaw performance improvements

    We’ve changed the response format of queryRaw to decrease its average size which reduces serialization CPU overhead.

    When querying large data sets, we expect you to see improved memory usage and up to 2x performance improvements.

    Fixes and improvements

    Prisma Client

    Prisma

    Language tools (e.g. VS Code)

    Credits

    Huge thanks to @ key-moon, @ pranayat, @ yubrot, @ skyzh for helping!

  • 5.17.0-integration-tmp-revert-vitest-work.2 - 2024-07-08
  • 5.17.0-integration-tmp-revert-vitest-work.1 - 2024-07-08
  • 5.17.0-integration-show-platform-auth-token.8 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.7 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.6 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.5 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.4 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.3 - 2024-07-10
  • 5.17.0-integration-show-platform-auth-token.2 - 2024-07-09
  • 5.17.0-integration-show-platform-auth-token.1 - 2024-07-09
  • 5.17.0-integration-remove-useless-clone.1 - 2024-07-09
  • 5.17.0-integration-fix-wasm-nextjs.2 - 2024-07-05
  • 5.17.0-integration-fix-wasm-nextjs.1 - 2024-07-05
  • 5.17.0-integration-fix-vitest-edgemw.1 - 2024-07-08
  • 5.17.0-integration-es2021.5 - 2024-07-01
  • 5.17.0-integration-es2021.4 - 2024-07-01
  • 5.17.0-integration-es2021.3 - 2024-07-01
  • 5.17.0-integration-es2021.2 - 2024-06-28
  • 5.17.0-integration-es2021.1 - 2024-06-26
  • 5.17.0-integ...

Snyk has created this PR to upgrade:
  - @emotion/cache from 11.11.0 to 11.13.1.
    See this package in npm: https://www.npmjs.com/package/@emotion/cache
  - @emotion/styled from 11.11.5 to 11.13.0.
    See this package in npm: https://www.npmjs.com/package/@emotion/styled
  - @emotion/react from 11.11.4 to 11.13.3.
    See this package in npm: https://www.npmjs.com/package/@emotion/react
  - @mui/icons-material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/icons-material
  - @mui/material from 5.15.17 to 5.16.7.
    See this package in npm: https://www.npmjs.com/package/@mui/material
  - @next/bundle-analyzer from 14.2.3 to 14.2.6.
    See this package in npm: https://www.npmjs.com/package/@next/bundle-analyzer
  - @next/third-parties from 14.2.3 to 14.2.6.
    See this package in npm: https://www.npmjs.com/package/@next/third-parties
  - @prisma/client from 5.13.0 to 5.18.0.
    See this package in npm: https://www.npmjs.com/package/@prisma/client
  - @t3-oss/env-nextjs from 0.10.1 to 0.11.0.
    See this package in npm: https://www.npmjs.com/package/@t3-oss/env-nextjs
  - @trpc/client from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/client
  - @trpc/next from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/next
  - @trpc/react-query from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/react-query
  - @trpc/server from 10.44.1 to 10.45.2.
    See this package in npm: https://www.npmjs.com/package/@trpc/server
  - @vercel/analytics from 1.2.2 to 1.3.1.
    See this package in npm: https://www.npmjs.com/package/@vercel/analytics
  - @vercel/speed-insights from 1.0.10 to 1.0.12.
    See this package in npm: https://www.npmjs.com/package/@vercel/speed-insights
  - cheerio from 1.0.0-rc.12 to 1.0.0.
    See this package in npm: https://www.npmjs.com/package/cheerio
  - next from 14.1.4 to 14.2.6.
    See this package in npm: https://www.npmjs.com/package/next
  - pdfjs-dist from 4.2.67 to 4.5.136.
    See this package in npm: https://www.npmjs.com/package/pdfjs-dist
  - react-resizable-panels from 2.0.19 to 2.1.1.
    See this package in npm: https://www.npmjs.com/package/react-resizable-panels
  - rehype-katex from 7.0.0 to 7.0.1.
    See this package in npm: https://www.npmjs.com/package/rehype-katex
  - sharp from 0.33.3 to 0.33.5.
    See this package in npm: https://www.npmjs.com/package/sharp
  - tesseract.js from 5.1.0 to 5.1.1.
    See this package in npm: https://www.npmjs.com/package/tesseract.js
  - tiktoken from 1.0.15 to 1.0.16.
    See this package in npm: https://www.npmjs.com/package/tiktoken
  - zustand from 4.5.2 to 4.5.5.
    See this package in npm: https://www.npmjs.com/package/zustand

See this project in Snyk:
https://app.snyk.io/org/black-da-bull/project/55d649ac-1ea9-4b11-9cbf-0e92f04e2de9?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

vercel bot commented Sep 14, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
big-agi ❌ Failed (Inspect) Sep 14, 2024 9:05am

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Copy link

squash-labs bot commented Sep 14, 2024

Manage this branch in Squash

Test this branch here: https://snyk-upgrade-68749cb2e1ceaa52f-nvchg.squash.io

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants