deps(example): bump the dependencies group across 1 directory with 9 updates #2675
+688
−441
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…updates Bumps the dependencies group with 9 updates in the /examples/nextjs-react-hook-form directory: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.468.0` | `0.469.0` | | [next](https://github.com/vercel/next.js) | `15.1.0` | `15.1.2` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.54.1` | `7.54.2` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.5.5` | `2.6.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.0.1` | `19.0.2` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.18.0` | `8.18.2` | | [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `15.1.0` | `15.1.2` | | [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react) | `7.37.2` | `7.37.3` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss) | `3.4.16` | `3.4.17` | Updates `lucide-react` from 0.468.0 to 0.469.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.469.0/packages/lucide-react) Updates `next` from 15.1.0 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.1.0...v15.1.2) Updates `react-hook-form` from 7.54.1 to 7.54.2 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.54.1...v7.54.2) Updates `tailwind-merge` from 2.5.5 to 2.6.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](dcastil/tailwind-merge@v2.5.5...v2.6.0) Updates `@types/react` from 19.0.1 to 19.0.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@typescript-eslint/parser` from 8.18.0 to 8.18.2 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.18.2/packages/parser) Updates `eslint-config-next` from 15.1.0 to 15.1.2 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v15.1.2/packages/eslint-config-next) Updates `eslint-plugin-react` from 7.37.2 to 7.37.3 - [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases) - [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md) - [Commits](jsx-eslint/eslint-plugin-react@v7.37.2...v7.37.3) Updates `tailwindcss` from 3.4.16 to 3.4.17 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.17/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss@v3.4.16...v3.4.17) --- updated-dependencies: - dependency-name: lucide-react dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: next dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: react-hook-form dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tailwind-merge dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@types/react" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: eslint-config-next dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: eslint-plugin-react dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tailwindcss dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Merging to
|
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/[email protected] |
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is unstable ownership?A new collaborator has begun publishing package versions. Package stability and security risk may be elevated. Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 9 updates in the /examples/nextjs-react-hook-form directory:
0.468.00.469.015.1.015.1.27.54.17.54.22.5.52.6.019.0.119.0.28.18.08.18.215.1.015.1.27.37.27.37.33.4.163.4.17Updates
lucide-reactfrom 0.468.0 to 0.469.0Release notes
Sourced from lucide-react's releases.
Commits
970fc3dfix(lucide-react): support React 19 (#2666)Updates
nextfrom 15.1.0 to 15.1.2Release notes
Sourced from next's releases.
... (truncated)
Commits
df392a1v15.1.240c9424Backport (v15): Update React from 7283a213-20241206 to 65e06cb7-20241218 (#74...4384c68v15.1.1d137863run build_and_test workflow on backport branchd27bb14backport: fix(turbo): sassOptions silenceDeprecations was not overwritten wit...0c8187aAdd NEXT_PRIVATE_SKIP_CANARY_CHECK env for bench job (#73763)e83ab18backport: refactor collectAppPageSegments (#73996)ada25fcDesignate as backport branchUpdates
react-hook-formfrom 7.54.1 to 7.54.2Release notes
Sourced from react-hook-form's releases.
Commits
ba87b787.54.2c3d1756⏰ close #12443 track disabled fields and only omit data on submit (#12491)5a96159⚛️ upgrade e2e automation app to react 19 (#12482)4ea65b3⚛️ fix #12478 issue should unregister input with controller (#12480)f37465d❤️ thank you very much Workleap for sponsoring the project!506fa04🧪 test(useWatch): destructure setValue from useFormUpdates
tailwind-mergefrom 2.5.5 to 2.6.0Release notes
Sourced from tailwind-merge's releases.
Commits
1a92c35v2.6.06480375add changelog for v2.6.07bb2dc0Merge pull request #509 from dcastil/renovate/rollup-plugin-node-resolve-16.x19eb0a1chore(deps): update dependency@rollup/plugin-node-resolveto v16d6f1014Merge pull request #508 from dcastil/renovate/codspeed-vitest-plugin-4.xd039e29chore(deps): update dependency@codspeed/vitest-pluginto v44aac490Merge pull request #507 from dcastil/renovate/migrate-config433e532chore(config): migrate config .github/renovate.json31da3f2fix unsupported import assertion34078eeMerge pull request #506 from dcastil/other/upgrade-github-workflows-to-node-22Updates
@types/reactfrom 19.0.1 to 19.0.2Commits
Updates
@typescript-eslint/parserfrom 8.18.0 to 8.18.2Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
157b781chore(release): publish 8.18.2b2ce158chore(release): publish 8.18.1d03270fchore: fix incorrect licenses (#10481)Updates
eslint-config-nextfrom 15.1.0 to 15.1.2Release notes
Sourced from eslint-config-next's releases.
... (truncated)
Commits
df392a1v15.1.24384c68v15.1.1Updates
eslint-plugin-reactfrom 7.37.2 to 7.37.3Release notes
Sourced from eslint-plugin-react's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-react's changelog.
Commits
244743aUpdate CHANGELOG and bump versionbc5b9dd[actions] release workflow needs some new domainsed3b1cf[Tests]jsx-uses-vars,jsx-uses-react: fixno-unused-varstests in esli...033ad19[Deps] updatearray.prototype.flatmap,es-iterator-helpers, `object.value...b4a14f4[meta] adddirectories.testb713026[Fix]prop-types: props missing in validation when using generic types from...66ae4c1[Fix]no-unknown-property: supportprecedenceprop in react 19233d442[Dev Deps] update@babel/preset-react958954d[Docs] fix broken links:2c0b10c[Tests] pin `@typescript-eslint/parser to < 8.18, due to a breaking changeUpdates
tailwindcssfrom 3.4.16 to 3.4.17Release notes
Sourced from tailwindcss's releases.
Changelog
Sourced from tailwindcss's changelog.
Commits
4f9f603Fix error02faa15v3.4.17e268b2aUpdate changelog0a836f7Work around issue with Node 22 and Jiti (#15421)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions