Skip to content

fix: fix console-deps-vuln #1707

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 30, 2025
Merged

fix: fix console-deps-vuln #1707

merged 1 commit into from
Apr 30, 2025

Conversation

EiffelFly
Copy link
Member

Because

  • fix console-deps-vuln

This commit

  • fix console-deps-vuln

@EiffelFly EiffelFly merged commit d2e4f6a into main Apr 30, 2025
10 checks passed
@EiffelFly EiffelFly deleted the fix-vuln-250430 branch April 30, 2025 07:16
@droplet-bot droplet-bot mentioned this pull request Apr 30, 2025
Merged
@github-actions GitHub Actions
Copy link

📦 Next.js Bundle Analysis for instillai-console

This analysis was generated by the Next.js Bundle Analysis action. 🤖

🎉 Global Bundle Size Decreased

Page Size (compressed)
global 77.68 KB (-3 B)
Details

The global bundle is the javascript bundle that loads alongside every page. It is in its own category because its impact is much higher - an increase to its size means that every page on your website loads slower, and a decrease means every page loads faster.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

If you want further insight into what is behind the changes, give @next/bundle-analyzer a try!

One Page Changed Size

The following page changed size from the code in this PR compared to its base branch:

Page Size (compressed) First Load
/_error 184 B (🟢 -1 B) 77.86 KB
Details

Only the gzipped size is provided here based on an expert tip.

First Load is the size of the global bundle plus the bundle for the individual page. If a user were to show up to your website and land on a given page, the first load size represents the amount of javascript that user would need to download. If next/link is used, subsequent page loads would only need to download that page's bundle (the number in the "Size" column), since the global bundle has already been downloaded.

Any third party scripts you have added directly to your app using the <script> tag are not accounted for in this analysis

Next to the size is how much the size has increased or decreased compared with the base branch of this PR. If this percentage has increased by undefined% or more, there will be a red status indicator applied, indicating that special attention should be given to this.

EiffelFly pushed a commit that referenced this pull request May 20, 2025
@droplet-bot
chore: release main (#1708)
2a39ca3 
🤖 I have created a release *beep* *boop*
---


<details><summary>0.66.0-beta</summary>

##
[0.66.0-beta](v0.65.0-beta...v0.66.0-beta)
(2025-05-20)


### Features

* update more deps vuln fixes
([#1709](#1709))
([8de02a1](8de02a1))


### Bug Fixes

* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
</details>

<details><summary>@instill-ai/design-system: 0.89.0</summary>

##
[0.89.0](https://github.com/instill-ai/console/compare/@instill-ai/design-system-v0.88.0...@instill-ai/design-system-v0.89.0)
(2025-05-20)


### Features

* new icon ([#1719](#1719))
([ec0d601](ec0d601))
* update chat message type
([#1717](#1717))
([529cd96](529cd96))


### Bug Fixes

* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
* fix hash02 icon
([#1723](#1723))
([c3e560f](c3e560f))
</details>

<details><summary>@instill-ai/design-tokens: 0.10.1</summary>

##
[0.10.1](https://github.com/instill-ai/console/compare/@instill-ai/design-tokens-v0.10.0...@instill-ai/design-tokens-v0.10.1)
(2025-05-20)


### Bug Fixes

* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
</details>

<details><summary>@instill-ai/toolkit: 0.118.0</summary>

##
[0.118.0](https://github.com/instill-ai/console/compare/@instill-ai/toolkit-v0.117.0...@instill-ai/toolkit-v0.118.0)
(2025-05-20)


### Features

* adapt BE new cell value
([#1711](#1711))
([05f5ddf](05f5ddf))
* adapt new upload file flow
([#1713](#1713))
([1c1f313](1c1f313))
* add catalog related data into fileCell
([#1721](#1721))
([e465681](e465681))
* add draftMode for table
([#1715](#1715))
([1cb5a09](1cb5a09))
* add editing table column state
([#1716](#1716))
([687d2e4](687d2e4))
* add selection type in table
([#1718](#1718))
([22171a5](22171a5))
* add table creation chat requests to sdk
([#1712](#1712))
([c6e7806](c6e7806))
* remove space related catalogue warnings and info
([#1724](#1724))
([5aab9f7](5aab9f7))
* update chat message type
([#1717](#1717))
([529cd96](529cd96))
* update more deps vuln fixes
([#1709](#1709))
([8de02a1](8de02a1))
* update store type to support broader range of cell preview
([#1722](#1722))
([7ef395f](7ef395f))
* update table cell type to make fileUid in the fileCell optional
([#1720](#1720))
([9af841d](9af841d))


### Bug Fixes

* fix chat with agent types
([#1714](#1714))
([1457eba](1457eba))
* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
* fix toolkit version number
([#1725](#1725))
([7b80a1d](7b80a1d))
</details>

<details><summary>instill-sdk: 0.16.0</summary>

##
[0.16.0](instill-sdk-v0.15.0...instill-sdk-v0.16.0)
(2025-05-20)


### Features

* adapt BE new cell value
([#1711](#1711))
([05f5ddf](05f5ddf))
* add catalog related data into fileCell
([#1721](#1721))
([e465681](e465681))
* add draftMode for table
([#1715](#1715))
([1cb5a09](1cb5a09))
* add editing table column state
([#1716](#1716))
([687d2e4](687d2e4))
* add selection type in table
([#1718](#1718))
([22171a5](22171a5))
* add table creation chat requests to sdk
([#1712](#1712))
([c6e7806](c6e7806))
* update chat message type
([#1717](#1717))
([529cd96](529cd96))
* update store type to support broader range of cell preview
([#1722](#1722))
([7ef395f](7ef395f))
* update table cell type to make fileUid in the fileCell optional
([#1720](#1720))
([9af841d](9af841d))


### Bug Fixes

* fix chat with agent types
([#1714](#1714))
([1457eba](1457eba))
* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
@droplet-bot droplet-bot mentioned this pull request Jun 17, 2025
Merged
EiffelFly pushed a commit that referenced this pull request Jun 17, 2025
@droplet-bot
chore: release main (#1757)
261ab17 
🤖 I have created a release *beep* *boop*
---


<details><summary>0.68.1</summary>

##
[0.68.1](v0.68.0...v0.68.1)
(2025-06-17)


### Features

* adapt kabab rule for resource like component, mode, and pipeline in
console ([#1238](#1238))
([88a3fde](88a3fde))
* adapt new ai task schema for auto gen form
([#1429](#1429))
([95ce7e0](95ce7e0))
* adapt policy link and revamp setting pages
([#1629](#1629))
([d11fab5](d11fab5))
* adapt the camelcase change of BE api response in the console
([#1227](#1227))
([552a7b4](552a7b4))
* adapt the camelCase rule in the query param
([#1230](#1230))
([2a9ee91](2a9ee91))
* add env example in console
([#1685](#1685))
([d1f2457](d1f2457))
* add feature flag for chat
([#1628](#1628))
([7455ce4](7455ce4))
* add table column definition metadata field
([#1765](#1765))
([ac6339f](ac6339f))
* automatically download icons
([#1551](#1551))
([02c7223](02c7223))
* bump console version
([#1751](#1751))
([6079f7b](6079f7b))
* Catalog MVP
([#1340](#1340))
([746793a](746793a))
* **catalog:** feat add 2 new API pages
([#1380](#1380))
([4c2a5db](4c2a5db))
* **catalog:** migrate API calls to sdk CatalogClient
([#1572](#1572))
([a305c98](a305c98))
* change "connector" to "component"
([#1476](#1476))
([bb2129f](bb2129f))
* change pathname from /builder to /editor
([#1223](#1223))
([88c4e04](88c4e04))
* **chat:** user can use @ to add tool suggestion in chat
([#1617](#1617))
([d76cd51](d76cd51))
* clean up the deps and upgrade nextjs to 15
([#1758](#1758))
([cc0fda0](cc0fda0))
* **component:** add email and anthropic icon
([#1266](#1266))
([49417af](49417af))
* **dashboard:** add credit usage chart on dashboard
([#1265](#1265))
([2304de7](2304de7))
* **dashboard:** revamp dashboard pathname to use singular noun
([#1276](#1276))
([e1467f4](e1467f4))
* deprecate markdown-to-jsx and support Latex in markdown
([#1623](#1623))
([cfea04e](cfea04e))
* deprecate old design-system
([#1756](#1756))
([03fca09](03fca09))
* **editor:** support universal ai component on schema validation
([#1502](#1502))
([4c3f93c](4c3f93c))
* enable namespace-switch to help user navigate pages
([#1224](#1224))
([067b5a5](067b5a5))
* implement blob artifact when trigger pipeline
([#1604](#1604))
([e93cb87](e93cb87))
* Integration page
([#1411](#1411))
([c1f800b](c1f800b))
* **integration:** add google-drive integration
([#1569](#1569))
([09eee30](09eee30))
* introduce low-code editor
([#1385](#1385))
([34a62b0](34a62b0))
* make the sdk e2e test mark every queryParam as required
([#1577](#1577))
([99c16a2](99c16a2))
* merge sprint 39 changes
([#1302](#1302))
([14194ab](14194ab))
* move restapi component into generic type
([#1326](#1326))
([fbaf1ab](fbaf1ab))
* oauth wip ([#1509](#1509))
([c8a92ad](c8a92ad))
* **pipeline-builder:** replace trigger node with variable node
([#1197](#1197))
([8a6f06d](8a6f06d))
* re-export lodash for console-cloud usage
([#1229](#1229))
([af35a00](af35a00))
* replace vdp-sdk/model with instill-sdk
([#1566](#1566))
([014f3ae](014f3ae))
* retire name parameter in the pipeline related endpoint
([#1575](#1575))
([533e757](533e757))
* support default value for variable
([#1562](#1562))
([1fdb718](1fdb718))
* support run-on-event webhook URL on editor
([#1498](#1498))
([d0ed46d](d0ed46d))
* support Slack OAuth integration
([#1534](#1534))
([0a4da01](0a4da01))
* support sorting the last use date in api token table
([#1246](#1246))
([55b3f74](55b3f74))
* unify Avatar using new fallback rule
([#1240](#1240))
([1f64140](1f64140))
* unify retry option of react-query, clean up metabase issue and
browserlist ([#1536](#1536))
([057d4af](057d4af))
* unify the Instill AI meeting schedule link
([#1619](#1619))
([51e76ff](51e76ff))
* update document component icon
([#1517](#1517))
([a0ac17b](a0ac17b))
* update models list ui/ux
([#1136](#1136))
([88944b4](88944b4))
* update more deps vuln fixes
([#1709](#1709))
([8de02a1](8de02a1))
* update namespaces selector ux
([#1736](#1736))
([fbf2c36](fbf2c36))
* update open graph
([#1366](#1366))
([418a2ee](418a2ee))
* use sonner as new toast
([#1760](#1760))
([df8f7e0](df8f7e0))
* view pipeline and model run logs
([#1383](#1383))
([f0b60fb](f0b60fb))


### Bug Fixes

* **catalog:** fix rename knowledge base to catalog
([#1371](#1371))
([aa64ddd](aa64ddd))
* dashboard ui tweaks
([#1664](#1664))
([faadf16](faadf16))
* **dashboard:** fix dashboard pipeline details page re-render issue
([#1280](#1280))
([06bf112](06bf112))
* **editor:** fix can't construct multiple edges to multiple components
from single component
([#1547](#1547))
([7ef2795](7ef2795))
* **editor:** fix not correctly add component skeleton
([#1398](#1398))
([09054ff](09054ff))
* **editor:** fix recipe didn't allow asana component
([#1478](#1478))
([aabf360](aabf360))
* **editor:** fix selected task can't scroll to button result in
covering up some text in CMDO
([#1485](#1485))
([55dbcbe](55dbcbe))
* fix and adapt new dashboard endpoint
([#1594](#1594))
([e043500](e043500))
* fix component documentation urls in the pipeline builder
([#1524](#1524))
([ee880c8](ee880c8))
* fix console didn't trigger the correct pipeline version
([#1287](#1287))
([8876366](8876366))
* fix console not correctly update the namespace requester uid when
requesting run related endpoint
([#1513](#1513))
([ec89e4e](ec89e4e))
* fix console-deps-vuln
([#1707](#1707))
([d2e4f6a](d2e4f6a))
* fix download component icon script to fallback invalid version
([#1553](#1553))
([0416a7c](0416a7c))
* fix onboarding form e2e
([#1545](#1545))
([e630cb0](e630cb0))
* fix prettier issue around root folder and vscode plugin
([#1258](#1258))
([d3eac49](d3eac49))
* fix secure cookie issue, default to use not-secure cookie on http site
([#1761](#1761))
([a2167ce](a2167ce))
* fix toaster style issue
([#1248](#1248))
([aec1217](aec1217))
* fix ts version that cause build issue
([#1407](#1407))
([f7b2b13](f7b2b13))
* **namespace-switch:** fix namespace-switch not guard user private
resource ([#1267](#1267))
([3694ce8](3694ce8))
* **namespace-switch:** fix not selecting the selected namespace as
default namespace when create model
([#1233](#1233))
([bc9f37e](bc9f37e))
* **namespace-switch:** fix the namespace switch style and deviation
([#1237](#1237))
([5e3c925](5e3c925))
* patch high vulnerabilities deps issues
([#1631](#1631))
([955355e](955355e))
* **pipeline/models:** fix add redirections
([#1446](#1446))
([77ef8fa](77ef8fa))
* **pipelines:** fix add redirection to playground and to settings tab
([#1376](#1376))
([2e31306](2e31306))
* refactor onboarding form and align topdown and profile page with cloud
([#1538](#1538))
([e955b44](e955b44))
* remove empty extra bottom space of recipe editor
([#1603](#1603))
([7e45955](7e45955))
* replace logout link with button
([#1762](#1762))
([6bd01df](6bd01df))
* replace readme with description in both model and pipeline page
metadata ([#1489](#1489))
([6cd643f](6cd643f))
* replace sql icon
([#1643](#1643))
([3da4d79](3da4d79))
* some props of the model trigger payload had snake_case, fixed them to
camelCase ([#1254](#1254))
([8da7b09](8da7b09))
* the getInstillClient on the sdk has wrongly cache issue on Vercel SSR
([#1528](#1528))
([c8e1fe3](c8e1fe3))
* unify how we handle error
([#1331](#1331))
([5d79849](5d79849))
* update nextjs version to cope with vulnerability
([#1663](#1663))
([e2f33b3](e2f33b3))


### Miscellaneous

* adapt backend instill-artifact naming changes
([#1503](#1503))
([fa027a8](fa027a8))
* add Collection component
([#1501](#1501))
([101af5f](101af5f))
* add new component icons
([#1359](#1359))
([dd37377](dd37377))
* add sdk readme
([#1307](#1307))
([10bd6d5](10bd6d5))
* **component:** add `scheduler` component
([#1637](#1637))
([406361a](406361a))
* **component:** add icon
([#1630](#1630))
([87174b9](87174b9))
* **component:** add icons for google-drive, perplexity-ai and leadiq
([#1627](#1627))
([4bed7fc](4bed7fc))
* **component:** rename restapi component to http component
([#1579](#1579))
([be56f33](be56f33))
* **deps:** bump up next js version
([#1661](#1661))
([4b96901](4b96901))
* release main
([#1189](#1189))
([8f2f600](8f2f600))
* release main
([#1225](#1225))
([967b3ef](967b3ef))
* release main
([#1250](#1250))
([90a4c05](90a4c05))
* release main
([#1255](#1255))
([50e951d](50e951d))
* release main
([#1257](#1257))
([97030eb](97030eb))
* release main
([#1281](#1281))
([2e384a5](2e384a5))
* release main
([#1283](#1283))
([dd638b6](dd638b6))
* release main
([#1320](#1320))
([2f797b8](2f797b8))
* release main
([#1339](#1339))
([5135c8b](5135c8b))
* release main
([#1354](#1354))
([54b140c](54b140c))
* release main
([#1372](#1372))
([edd61ca](edd61ca))
* release main
([#1425](#1425))
([a2ba260](a2ba260))
* release main
([#1464](#1464))
([930330e](930330e))
* release main
([#1482](#1482))
([c9e54e2](c9e54e2))
* release main
([#1490](#1490))
([17e0cae](17e0cae))
* release main
([#1499](#1499))
([bd1f6c9](bd1f6c9))
* release main
([#1511](#1511))
([4dd135e](4dd135e))
* release main
([#1525](#1525))
([febef5b](febef5b))
* release main
([#1527](#1527))
([75f30ab](75f30ab))
* release main
([#1537](#1537))
([adf89be](adf89be))
* release main
([#1558](#1558))
([365a5b9](365a5b9))
* release main
([#1563](#1563))
([ae051d1](ae051d1))
* release main
([#1598](#1598))
([675ceb0](675ceb0))
* release main
([#1618](#1618))
([1a71dbd](1a71dbd))
* release main
([#1642](#1642))
([91e8bc4](91e8bc4))
* release main
([#1658](#1658))
([f55b650](f55b650))
* release main
([#1665](#1665))
([93688e7](93688e7))
* release main
([#1686](#1686))
([446067a](446067a))
* release main
([#1708](#1708))
([2a39ca3](2a39ca3))
* release main
([#1733](#1733))
([cfded3b](cfded3b))
* release main
([#1749](#1749))
([c57997c](c57997c))
* replace pipeline type in toolkit with type in sdk
([#1319](#1319))
([48de6c3](48de6c3))
* retire vdp-sdk/mgmt
([#1557](#1557))
([f683265](f683265))
* update Collection component icon
([#1508](#1508))
([8ea6793](8ea6793))
* update nextjs version to 14.2.10, clean up playwright deps
([#1483](#1483))
([d5ae86a](d5ae86a))
* use prettier to sort import order
([#1261](#1261))
([4640c24](4640c24))
</details>

<details><summary>@instill-ai/design-system: 0.90.1</summary>

##
[0.90.1](https://github.com/instill-ai/console/compare/@instill-ai/design-system-v0.90.0...@instill-ai/design-system-v0.90.1)
(2025-06-17)


### Features

* clean up the deps and upgrade nextjs to 15
([#1758](#1758))
([cc0fda0](cc0fda0))
* deprecate old design-system
([#1756](#1756))
([03fca09](03fca09))
* use sonner as new toast
([#1760](#1760))
([df8f7e0](df8f7e0))


### Bug Fixes

* fix secure cookie issue, default to use not-secure cookie on http site
([#1761](#1761))
([a2167ce](a2167ce))
</details>

<details><summary>@instill-ai/design-tokens: 0.10.2</summary>

##
[0.10.2](https://github.com/instill-ai/console/compare/@instill-ai/design-tokens-v0.10.1...@instill-ai/design-tokens-v0.10.2)
(2025-06-17)


### Features

* clean up the deps and upgrade nextjs to 15
([#1758](#1758))
([cc0fda0](cc0fda0))
</details>

<details><summary>@instill-ai/toolkit: 0.120.2</summary>

##
[0.120.2](https://github.com/instill-ai/console/compare/@instill-ai/toolkit-v0.120.1...@instill-ai/toolkit-v0.120.2)
(2025-06-17)


### Features

* add table column definition metadata field
([#1765](#1765))
([ac6339f](ac6339f))
* clean up the deps and upgrade nextjs to 15
([#1758](#1758))
([cc0fda0](cc0fda0))
* deprecate old design-system
([#1756](#1756))
([03fca09](03fca09))
* migrate PLAN_PRO to PLAN_STARTER
([#1767](#1767))
([4620d67](4620d67))
* use sonner as new toast
([#1760](#1760))
([df8f7e0](df8f7e0))


### Bug Fixes

* fix console integration setting page privacy link
([#1766](#1766))
([d44b7bd](d44b7bd))
* fix model api page
([#1768](#1768))
([0ab19a9](0ab19a9))
* remove chat link in CE version
([#1764](#1764))
([cbec7bc](cbec7bc))
* replace logout link with button
([#1762](#1762))
([6bd01df](6bd01df))
</details>

<details><summary>instill-sdk: 0.18.2</summary>

##
[0.18.2](instill-sdk-v0.18.1...instill-sdk-v0.18.2)
(2025-06-17)


### Features

* add table column definition metadata field
([#1765](#1765))
([ac6339f](ac6339f))
* clean up the deps and upgrade nextjs to 15
([#1758](#1758))
([cc0fda0](cc0fda0))
* migrate PLAN_PRO to PLAN_STARTER
([#1767](#1767))
([4620d67](4620d67))
* use sonner as new toast
([#1760](#1760))
([df8f7e0](df8f7e0))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@pinglin pinglin Awaiting requested review from pinglin pinglin is a code owner

@xiaofei-du xiaofei-du Awaiting requested review from xiaofei-du xiaofei-du is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@EiffelFly