Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all non-major dependencies #470

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 20, 2024

This PR contains the following updates:

Package Type Update Change OpenSSF
@crowdin/crowdin-api-client dependencies minor 1.35.0 -> 1.36.0 OpenSSF Scorecard
@prisma/adapter-neon (source) dependencies minor 5.19.1 -> 5.20.0 OpenSSF Scorecard
@prisma/client (source) dependencies minor 5.19.1 -> 5.20.0 OpenSSF Scorecard
@storybook/addon-a11y (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/addon-essentials (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/addon-interactions (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/addon-links (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/addon-viewport (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/blocks (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/nextjs (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/react (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@storybook/test (source) dependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard
@types/node (source) devDependencies patch 20.16.5 -> 20.16.6 OpenSSF Scorecard
@types/react (source) devDependencies patch 18.3.7 -> 18.3.9 OpenSSF Scorecard
chromatic (source) devDependencies patch 11.10.2 -> 11.10.3 OpenSSF Scorecard
knip (source) devDependencies patch 5.30.2 -> 5.30.5 OpenSSF Scorecard
pnpm (source) packageManager minor 9.10.0 -> 9.11.0 OpenSSF Scorecard
prisma (source) devDependencies minor 5.19.1 -> 5.20.0 OpenSSF Scorecard
storybook (source) devDependencies patch 8.3.1 -> 8.3.3 OpenSSF Scorecard

Release Notes

crowdin/crowdin-api-client-js (@​crowdin/crowdin-api-client)

v1.36.0

Compare Source

What's Changed

New Contributors

Full Changelog: crowdin/crowdin-api-client-js@1.35.0...1.36.0

prisma/prisma (@​prisma/adapter-neon)

v5.20.0

🌟 Help us spread the word about Prisma by starring the repo or posting on X about the release. 🌟

Highlights

strictUndefinedChecks in Preview

With Prisma ORM 5.20.0, the Preview feature strictUndefinedChecks will disallow any value that is explicitly undefined and will be a runtime error. This change is direct feedback from this GitHub issue and follows our latest proposal on the same issue.

To demonstrate the change, take the following code snippet:

prisma.table.deleteMany({
  where: {
    // If `nullableThing` is nullish, this query will remove all data.
    email: nullableThing?.property,
  }
})

In Prisma ORM 5.19.0 and below, this could result in unintended behavior. In Prisma ORM 5.20.0, if the strictUndefinedChecks Preview feature is enabled, you will get a runtime error instead:

Invalid \`prisma.user.findMany()\` invocation in
/client/tests/functional/strictUndefinedChecks/test.ts:0:0
  XX })
  XX 
  XX test('throws on undefined input field', async () => {
→ XX   const result = prisma.user.deleteMany({
         where: {
           email: undefined
                  ~~~~~~~~~
         }
       })
Invalid value for argument \`where\`: explicitly \`undefined\` values are not allowed."

We have also introduced the Prisma.skip symbol, which will allow you to get the previous behavior if desired.

prisma.table.findMany({
  where: {
    // Use Prisma.skip to skip parts of the query
    email: nullableEmail ?? Prisma.skip
  }
})

From Prisma ORM 5.20.0 onward, we recommend enabling strictUndefinedChecks, along with the TypeScript compiler option exactOptionalPropertyTypes, which will help catch cases of undefined values at compile time. Together, these two changes will help protect your Prisma queries from potentially destructive behavior.

strictUndefinedChecks will be a valid Preview feature for the remainder of Prisma ORM 5. With our next major version, this behavior will become the default and the Preview feature will be “graduated” to Generally Available.

If you have any questions or feedback about strictUndefinedChecks, please ask/comment in our dedicated Preview feature GitHub discussion.

typedSql bug fix

Thank you to everyone who has tried out our typedSql Preview feature and provided feedback! This release has a quick fix for typescript files generated when Prisma Schema enums had hyphens.

Fixes and improvements

Prisma
Prisma Engines

Credits

Huge thanks to @​mcuelenaere, @​pagewang0, @​key-moon, @​pranayat, @​yubrot, @​thijmenjk, @​mydea, @​HRM, @​haaawk, @​baileywickham, @​brian-dlee, @​nickcarnival, @​eruditmorina, @​nzakas, and @​gutyerrez for helping!

storybookjs/storybook (@​storybook/addon-a11y)

v8.3.3

Compare Source

v8.3.2

Compare Source

chromaui/chromatic-cli (chromatic)

v11.10.3

Compare Source

🐛 Bug Fix
Authors: 2

webpro-nl/knip (knip)

v5.30.5

Compare Source

v5.30.4

Compare Source

  • Bun is catching up (1002b67)
  • Deal with packages that confusingly include package.json#types but also recommend to install DT pkg (dd10163)

v5.30.3

Compare Source

pnpm/pnpm (pnpm)

v9.11.0

Compare Source


Configuration

📅 Schedule: Branch creation - "before 4am on Monday,before 4am on Thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from JoeKarow as a code owner September 20, 2024 14:31
@renovate renovate bot added automerge Enable Kodiak auto-merge dependencies Change in project dependencies. labels Sep 20, 2024
Copy link

vercel bot commented Sep 20, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
transmascfutures ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 24, 2024 3:53pm

Copy link

coderabbitai bot commented Sep 20, 2024

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    -- I pushed a fix in commit <commit_id>, please review it.
    -- Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    -- @coderabbitai generate unit testing code for this file.
    -- @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    -- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    -- @coderabbitai read src/utils.ts and generate unit testing code.
    -- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    -- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary or <!-- #coderabbitai summary --> to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai or @coderabbitai title anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link

socket-security bot commented Sep 20, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@crowdin/crowdin-api-client@1.36.0 network Transitive: filesystem +8 2.97 MB andrii.bodnar
npm/@prisma/client@5.20.0 environment, filesystem, shell 0 9.16 MB prismabot
npm/@storybook/addon-a11y@8.3.3 None +3 2.85 MB shilman
npm/@storybook/addon-essentials@8.3.3 Transitive: environment, filesystem +21 4.27 MB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/addon-interactions@8.3.3 Transitive: environment +5 519 kB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/addon-links@8.3.3 None +4 299 kB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/addon-viewport@8.3.3 Transitive: environment +2 86.3 kB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/blocks@8.3.3 Transitive: environment +13 4.23 MB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/nextjs@8.3.3 environment Transitive: eval, filesystem, network, shell, unsafe +265 31.3 MB shilman
npm/@storybook/react@8.3.3 Transitive: environment +25 4.61 MB domyen, ghengeveld, jreinhold, ...8 more
npm/@storybook/test@8.3.3 environment, eval +50 9.25 MB shilman
npm/@types/node@20.16.6 None 0 2.18 MB types
npm/@types/react@18.3.9 None +2 1.69 MB types
npm/chromatic@11.10.3 None 0 4.27 MB andrewortwein, cdedreuille, codykaup, ...6 more

🚮 Removed packages: npm/@crowdin/crowdin-api-client@1.35.0, npm/@prisma/adapter-neon@5.19.1, npm/@prisma/client@5.19.1, npm/@storybook/addon-a11y@8.3.1, npm/@storybook/addon-essentials@8.3.1, npm/@storybook/addon-interactions@8.3.1, npm/@storybook/addon-links@8.3.1, npm/@storybook/addon-viewport@8.3.1, npm/@storybook/blocks@8.3.1, npm/@storybook/nextjs@8.3.1, npm/@storybook/react@8.3.1, npm/@storybook/test@8.3.1, npm/@types/node@20.16.5, npm/@types/react@18.3.7, npm/chromatic@11.10.2, npm/knip@5.30.2, npm/lint-staged@15.2.10, npm/listr2@8.2.4, npm/luxon@3.5.0, npm/merge-anything@6.0.2

View full report↗︎

Copy link

relativeci bot commented Sep 20, 2024

#401 Bundle Size — 18.74MiB (~+0.01%).

7a794e4(current) vs 1658a8c dev#388(baseline)

Bundle metrics  Change 2 changes Regression 1 regression
                 Current
#401
     Baseline
#388
Regression  Initial JS 1005.68KiB(~+0.01%) 1005.61KiB
No change  Initial CSS 6.61KiB 6.61KiB
Change  Cache Invalidation 2.31% 0.01%
No change  Chunks 20 20
No change  Assets 80 80
No change  Modules 792 792
No change  Duplicate Modules 103 103
No change  Duplicate Code 5.66% 5.66%
No change  Packages 81 81
No change  Duplicate Packages 0 0
Bundle size by type  Change 1 change Regression 1 regression
                 Current
#401
     Baseline
#388
No change  IMG 17.47MiB 17.47MiB
Regression  JS 1.07MiB (~+0.01%) 1.07MiB
No change  Fonts 189.64KiB 189.64KiB
No change  CSS 6.61KiB 6.61KiB
No change  Other 4.07KiB 4.07KiB

Bundle analysis reportBranch renovate/all-minor-patchProject dashboard


Generated by RelativeCIDocumentationReport issue

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Copy link

sonarcloud bot commented Sep 24, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automerge Enable Kodiak auto-merge dependencies Change in project dependencies.
Development

Successfully merging this pull request may close these issues.

0 participants