[Snyk] Upgrade: , , , , , , , , , , , , , , , , embla-carousel-react, framer-motion, lucide-react, next, react-hook-form, react-icons, react-spinners, resend, tailwind-merge, zustand #5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @hookform/resolvers from 3.6.0 to 3.9.0.
See this package in npm: https://www.npmjs.com/package/@hookform/resolvers
- @prisma/client from 5.15.0 to 5.18.0.
See this package in npm: https://www.npmjs.com/package/@prisma/client
- @radix-ui/react-slot from 1.0.2 to 1.1.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-slot
- @radix-ui/react-dialog from 1.0.5 to 1.1.1.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-dialog
- @radix-ui/react-alert-dialog from 1.0.5 to 1.1.1.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-alert-dialog
- @radix-ui/react-avatar from 1.0.4 to 1.1.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-avatar
- @radix-ui/react-checkbox from 1.0.4 to 1.1.1.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-checkbox
- @radix-ui/react-dropdown-menu from 2.0.6 to 2.1.1.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-dropdown-menu
- @radix-ui/react-label from 2.0.2 to 2.1.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-label
- @radix-ui/react-navigation-menu from 1.1.4 to 1.2.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-navigation-menu
- @radix-ui/react-progress from 1.0.3 to 1.1.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-progress
- @radix-ui/react-select from 2.0.0 to 2.1.1.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-select
- @radix-ui/react-switch from 1.0.3 to 1.1.0.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-switch
- @radix-ui/react-tooltip from 1.0.7 to 1.1.2.
See this package in npm: https://www.npmjs.com/package/@radix-ui/react-tooltip
- @t3-oss/env-nextjs from 0.9.2 to 0.11.1.
See this package in npm: https://www.npmjs.com/package/@t3-oss/env-nextjs
- @types/lodash from 4.17.5 to 4.17.7.
See this package in npm: https://www.npmjs.com/package/@types/lodash
- embla-carousel-react from 8.1.5 to 8.2.0.
See this package in npm: https://www.npmjs.com/package/embla-carousel-react
- framer-motion from 11.2.10 to 11.3.30.
See this package in npm: https://www.npmjs.com/package/framer-motion
- lucide-react from 0.363.0 to 0.436.0.
See this package in npm: https://www.npmjs.com/package/lucide-react
- next from 14.2.0 to 14.2.6.
See this package in npm: https://www.npmjs.com/package/next
- react-hook-form from 7.51.5 to 7.53.0.
See this package in npm: https://www.npmjs.com/package/react-hook-form
- react-icons from 5.2.1 to 5.3.0.
See this package in npm: https://www.npmjs.com/package/react-icons
- react-spinners from 0.13.8 to 0.14.1.
See this package in npm: https://www.npmjs.com/package/react-spinners
- resend from 3.3.0 to 3.5.0.
See this package in npm: https://www.npmjs.com/package/resend
- tailwind-merge from 2.3.0 to 2.5.2.
See this package in npm: https://www.npmjs.com/package/tailwind-merge
- zustand from 4.5.2 to 4.5.5.
See this package in npm: https://www.npmjs.com/package/zustand
See this project in Snyk:
https://app.snyk.io/org/david-besse/project/ca4220d7-337d-495c-940b-f8f1a0115ecc?utm_source=github&utm_medium=referral&page=upgrade-pr
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
David-Besse
deleted the
snyk-upgrade-a87a4bf6f0dc06bb7f2f6e9f4da5a115
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@hookform/resolvers
from 3.6.0 to 3.9.0 | 3 versions ahead of your current version | 2 months ago
on 2024-07-05
@prisma/client
from 5.15.0 to 5.18.0 | 234 versions ahead of your current version | a month ago
on 2024-08-06
@radix-ui/react-slot
from 1.0.2 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-dialog
from 1.0.5 to 1.1.1 | 18 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-alert-dialog
from 1.0.5 to 1.1.1 | 17 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-avatar
from 1.0.4 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-checkbox
from 1.0.4 to 1.1.1 | 10 versions ahead of your current version | 3 months ago
on 2024-06-28
@radix-ui/react-dropdown-menu
from 2.0.6 to 2.1.1 | 21 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-label
from 2.0.2 to 2.1.0 | 15 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-navigation-menu
from 1.1.4 to 1.2.0 | 18 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-progress
from 1.0.3 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-select
from 2.0.0 to 2.1.1 | 22 versions ahead of your current version | 3 months ago
on 2024-06-21
@radix-ui/react-switch
from 1.0.3 to 1.1.0 | 8 versions ahead of your current version | 3 months ago
on 2024-06-19
@radix-ui/react-tooltip
from 1.0.7 to 1.1.2 | 22 versions ahead of your current version | 3 months ago
on 2024-06-28
@t3-oss/env-nextjs
from 0.9.2 to 0.11.1 | 5 versions ahead of your current version | 22 days ago
on 2024-08-25
@types/lodash
from 4.17.5 to 4.17.7 | 2 versions ahead of your current version | 2 months ago
on 2024-07-16
embla-carousel-react
from 8.1.5 to 8.2.0 | 4 versions ahead of your current version | a month ago
on 2024-08-20
framer-motion
from 11.2.10 to 11.3.30 | 66 versions ahead of your current version | 24 days ago
on 2024-08-23
lucide-react
from 0.363.0 to 0.436.0 | 67 versions ahead of your current version | 22 days ago
on 2024-08-25
next
from 14.2.0 to 14.2.6 | 14 versions ahead of your current version | 25 days ago
on 2024-08-21
react-hook-form
from 7.51.5 to 7.53.0 | 4 versions ahead of your current version | 23 days ago
on 2024-08-24
react-icons
from 5.2.1 to 5.3.0 | 1 version ahead of your current version | a month ago
on 2024-08-13
react-spinners
from 0.13.8 to 0.14.1 | 2 versions ahead of your current version | 3 months ago
on 2024-06-26
resend
from 3.3.0 to 3.5.0 | 2 versions ahead of your current version | 2 months ago
on 2024-07-22
tailwind-merge
from 2.3.0 to 2.5.2 | 28 versions ahead of your current version | a month ago
on 2024-08-12
zustand
from 4.5.2 to 4.5.5 | 3 versions ahead of your current version | a month ago
on 2024-08-15
Release notes
Package name: @hookform/resolvers
-
3.9.0 - 2024-07-05
- fluentvalidation-ts: add fluentvalidation-ts resolver (#702) (5fc1e63)
import { useForm } from 'react-hook-form';
- add typeschema resolver (#699) (18e423f), closes #693
- typeboxResolver: make TypeBox resolver work with compiled schema (#674) (e8e0f80)
-
3.7.0 - 2024-07-02
- zodResolver: cannot read properties of undefined (reading 'length') (a3e50c6)
- chore: update valibot dependency to version >=0.33.0 (#695)
- add VineJS resolver (#677) (c0d528b)
import { useForm } from 'react-hook-form';
- upgrade and migrate Valibot to v0.31.0 (#688) (bdd5ef5)
from @hookform/resolvers GitHub release notes3.9.0 (2024-07-05)
Features
import { fluentValidationResolver } from '@ hookform/resolvers/fluentvalidation-ts';
import { Validator } from 'fluentvalidation-ts';
class FormDataValidator extends Validator<FormData> {
constructor() {
super();
}
}
const App = () => {
const { register, handleSubmit } = useForm({
resolver: fluentValidationResolver(new FormDataValidator()),
});
return (
<form onSubmit={handleSubmit((d) => console.log(d))}>
<input {...register('username')} />
{errors.username && <span role="alert">{errors.username.message}</span>}
<input {...register('password')} />
{errors.password && <span role="alert">{errors.password.message}</span>}
<button type="submit">submit</button>
</form>
);
};
3.8.0 - 2024-07-05
3.8.0 (2024-07-05)
Features
3.7.0 (2024-07-02)
Bug Fixes
Features
import { vineResolver } from '@ hookform/resolvers/vine';
import vine from '@ vinejs/vine';
const schema = vine.compile(
vine.object({
username: vine.string().minLength(1),
password: vine.string().minLength(1),
}),
);
const App = () => {
const { register, handleSubmit } = useForm({
resolver: vineResolver(schema),
});
return (
<form onSubmit={handleSubmit((d) => console.log(d))}>
<input {...register('username')} />
{errors.username && <span role="alert">{errors.username.message}</span>}
<input {...register('password')} />
{errors.password && <span role="alert">{errors.password.message}</span>}
<button type="submit">submit</button>
</form>
);
};
3.6.0 - 2024-06-06
3.6.0 (2024-06-06)
Features
Package name: @prisma/client
🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟
Highlights
Native support for UUIDv7
Previous to this release, the Prisma Schema function
uuid()did not accept any arguments and created a UUIDv4 ID. While sufficient in many cases, UUIDv4 has a few drawbacks, namely that it is not temporally sortable.UUIDv7 attempts to resolve this issue, making it easy to temporally sort your database rows by ID!
To support this, we’ve updated the
uuid()function in Prisma Schema to accept an optional, integer argument. Right now, the only valid values are4and7, with4being the default.id String @id @default(uuid()) // defaults to 4
name String
}
model User {
id String @id @default(uuid(4)) // same as above, but explicit
name String
}
model User {
id String @id @default(uuid(7)) // will use UUIDv7 instead of UUIDv4
name String
}
Bug squashing
We’ve squashed a number of bugs this release, special thanks to everyone who helped us! A few select highlights are:
prismaSchemaFolder.Json[]fields will now return[]instead ofnullwhen accessed through a join using therelationJoinsPreview feature.Fixes and improvements
Prisma
Language tools (e.g. VS Code)
Share your feedback about Prisma ORM
We want to know how you like working with Prisma ORM in your projects! Please take our 2min survey and let us know what you like or where we can improve 🙏
Credits
Huge thanks to @ mcuelenaere, @ pagewang0, @ Druue, @ key-moon, @ Jolg42, @ pranayat, @ ospfranco, @ yubrot, @ skyzh, @ haaawk for helping!
🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟
Highlights
VSCode extension improvements
We’re happy to introduce some cool new features that will make your experience with the Prisma VSCode extension even better!
Find references across schema files
The ability to hop between references of a given symbol is really useful in application code and now with the introduction of multi-file schema, we think it’s the perfect time to bring this feature to the VSCode extension!
With the 5.17.0 release, you’ll now have the ability to use the native “find references” feature to find any usage of a given symbol
Added context on hover
When hovering over a symbol that references a view, type, enum, or any other block with multiple values, you’ll now see a handy pop out that shows what is in that block at a glance.
Additional quick fixes
We’ve taken some fixes made by the
prisma formatcli command and made them quick fixes available to the VSCode Extension. Now, when you have forget a back relation or relation scalar field, you’ll now see in real time what is wrong and have the option to fix it via the extension.QueryRaw performance improvements
We’ve changed the response format of
queryRawto decrease its average size which reduces serialization CPU overhead.When querying large data sets, we expect you to see improved memory usage and up to 2x performance improvements.
Fixes and improvements
Prisma Client
This is the 10th instance of Prisma Client being started. Make sure this is intentional.warningPrisma
Language tools (e.g. VS Code)
Credits
Huge thanks to @ key-moon, @ pranayat, @ yubrot, @ skyzh for helping!
Today, we are issuing the 5.16.2 patch release to fix an issue in Prisma client.
Fix in Prisma Client
Today, we are issuing the 5.16.1 patch release to fix an issue in Prisma client.
Fix in Prisma Client
🌟 Help us spread the word about Prisma by starring the repo or tweeting about the release. 🌟
Highlights
Omit model fields globally
With Prisma ORM 5.16.0 we’re more than happy to announce that we’re expanding the
omitApiPreview feature to also include the ability to omit fields globally.When the Preview feature is enabled, you’re able to define fields to omit when instantiating Prisma Client.
You’re also able to omit fields from multiple models and multiple fields from the same model
With both local and global
omit, you now have the flexibility to completely remove sensitive fields while also tailoring individual queries. If you need the ability to generally omit a field except in a specific query, you can also overwrite a global omit locallyomit: {
user: {
// password is omitted globally.
password: true,
},
},
});
const userWithPassword = await prisma.user.findUnique({
omit: { password: false }, // omit now false, so password is returned
where: { id: 1 },
});
Changes to
prismaSchemaFolderIn
5.15.0we released theprismaSchemaFolderPreview feature, allowing you to create multiple Prisma Schema files in aprisma/schemadirectory. We’ve gotten a lot of great feedback and are really excited with how the community has been using the feature.To continue improving our multi-file schema support, we have a few breaking changes to the
prismaSchemaFolderfeature:prismaSchemaFolderfeature, a path is now relative to the file it is defined in rather than relative to theprisma/schemafolder. This means that if you have a generator block in/project/prisma/schema/config/generator.prismawith anoutputof./foothe output will be resolved to/project/prisma/schema/config/foorather than/project/prisma/foo. The path to a SQLite file will be resolved in the same manner.prisma/schemaas well asprisma/schema.prisma. Our initial implementation looked for a.prismafile first and would ignore theschemafolder if it exists. This is now an error.Changes to
fullTextSearchIn order to improve our full-text search implementation we have made a breaking change to the
fullTextSearchPreview feature.Previously, when the feature was enabled we updated the
<Model>OrderByWithRelationInputTypeScript type with the<Model>OrderByWithRelationAndSearchRelevanceInputtype. However, we have noted that there are no cases where relational ordering is needed but search relevance is not. Thus, we have decided to remove the<Model>OrderByWithRelationAndSearchRelevanceInputnaming and only use the<Model>OrderByWithRelationInputnaming.Fixes and improvements
Prisma
Prisma has no exported member named OrderByWithRelationInput. Did you mean OrderByWithAggregationInput?prisma generate@ prisma/adapter-pgmodifies node-postgres global type parsersdb pullfails with[libs\user-facing-errors\src\quaint.rs:136:18] internal error: entered unreachable codeon invalid credentialsLanguage tools (e.g. VS Code)