[Snyk] Upgrade: , clsx, framer-motion, meilisearch, next, next-themes, openai, p-map, pinecone-client, quick-lru, react-spinners, unified, rehype-format, rehype-raw, rehype-stringify, remark-gfm, remark-parse, remark-rehype, remark-stringify #28

WontonSam · 2024-09-09T19:05:50Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name	Versions	Released on

@vercel/analytics
from 0.1.11 to 1.3.1 | 28 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-24
clsx
from 1.2.1 to 2.1.1 | 5 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
on 2024-04-23
framer-motion
from 10.18.0 to 11.3.28 | 129 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 25 days ago
on 2024-08-15
meilisearch
from 0.31.1 to 0.41.0 | 27 versions ahead of your current version | 2 months ago
on 2024-07-01
next
from 13.5.6 to 14.2.5 | 362 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
on 2024-07-10
next-themes
from 0.2.1 to 0.3.0 | 2 versions ahead of your current version | 6 months ago
on 2024-03-13
openai
from 3.3.0 to 4.56.0 | 146 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 24 days ago
on 2024-08-16
p-map
from 5.5.0 to 7.0.2 | 4 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
on 2024-04-03
pinecone-client
from 1.1.2 to 2.0.0 | 2 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-10-23
quick-lru
from 6.1.2 to 7.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-09-11
react-spinners
from 0.13.8 to 0.14.1 | 2 versions ahead of your current version | 2 months ago
on 2024-06-26
unified
from 10.1.2 to 11.0.5 | 6 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-19
rehype-format
from 4.0.1 to 5.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-08-30
rehype-raw
from 6.1.1 to 7.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-08-26
rehype-stringify
from 9.0.4 to 10.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-08-26
remark-gfm
from 3.0.1 to 4.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-09-18
remark-parse
from 10.0.2 to 11.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-09-18
remark-rehype
from 10.1.0 to 11.1.0 | 2 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 8 months ago
on 2024-01-11
remark-stringify
from 10.0.3 to 11.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-09-18

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	676	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	676	Proof of Concept
Server-Side Request Forgery (SSRF) SNYK-JS-NEXT-6828457	676	Proof of Concept

Release notes

Package name: @vercel/analytics

1.3.1 - 2024-05-24
What's Changed
- fix: nextjs parallel routes with catchall isn't supported by @ feugy in #141
Full Changelog: 1.3.0...1.3.1
1.3.0 - 2024-05-23
What's Changed
- feat: include flags in custom events and page views by @ AndyBitz, @ tobiaslins, @ feugy in #140
Full Changelog: 1.2.2...1.3.0
1.2.2 - 2024-02-20
What's Changed
- fix: export issue when testing with jest and ts-node by @ feugy in #134
Full Changelog: 1.2.1...1.2.2
1.2.1 - 2024-02-19
What's Changed
- fix: incorrect package exports by @ feugy in #133
New Contributors
- @ feugy made their first contribution in #133
Full Changelog: 1.2.0...1.2.1
1.2.0 - 2024-02-16
What's Changed
- Add route support by @ tobiaslins in #127
Full Changelog: 1.1.4...1.2.0
1.2.0-beta.4 - 2024-02-01
Improved route support for race conditions
1.2.0-beta.3 - 2024-01-26
Improve route support in pages router
1.2.0-beta.2 - 2024-01-25
Further improve route support and better testing
1.2.0-beta.1 - 2024-01-25
1.1.4 - 2024-02-15
What's Changed
- server/track: always consume the response body for a track request by @ MaxLeiter in #131
New Contributors
- @ MaxLeiter made their first contribution in #131
Full Changelog: 1.1.3...1.1.4
1.1.3 - 2024-02-05
What's Changed
- Server events can now be sent when deployment protection is enabled by @ tobiaslins in #129
Full Changelog: 1.1.2...1.1.3
1.1.2 - 2024-01-18
1.1.1 - 2023-10-12
1.1.0 - 2023-10-06
1.1.0-beta.9 - 2023-10-05
1.1.0-beta.8 - 2023-10-05
1.1.0-beta.7 - 2023-10-05
1.1.0-beta.6 - 2023-10-05
1.1.0-beta.5 - 2023-09-21
1.1.0-beta.4 - 2023-08-11
1.1.0-beta.3 - 2023-08-08
1.1.0-beta.2 - 2023-07-18
1.1.0-beta.1 - 2023-07-14
1.0.2 - 2023-08-10
1.0.1 - 2023-05-03
1.0.1-beta.1 - 2023-04-28
1.0.1-beta.0 - 2023-04-28
1.0.0 - 2023-04-19
0.1.11 - 2023-02-28

from @vercel/analytics GitHub release notes

Package name: clsx

2.1.1 - 2024-04-23
Patches
- (types) Include bigint in ClassValue type: (#96): 3d960ab
  Accommodates recent @ types/react changes to ReactNode.
  Thank you @ ViliamKopecky~!
Chores
- Add licenses.dev badge: 684509c
  This service recursively analyzes entire dependency graphs to ensure that a package (or your project) is using permissive licenses. For example, here's a results table for polka@next and a larger astro example.
Full Changelog: v2.1.0...v2.1.1
2.1.0 - 2023-12-29
Features
- Add new clsx/lite submodule for string-only usage: 1a49142
  
  This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:
```
clsx('foo bar', props.maybe && 'conditional classes', props.className);
```
  Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!
  
  import { clsx } from 'clsx';
  import { clsx as lite } from 'clsx/lite';
  
  // strings-only usage is identical
  clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
  lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
  
  // clsx/lite ignores all non-strings
  clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
  lite('foo', { a: true, b: false, c: true }); //=> "foo"
Full Changelog: v2.0.1...v2.1.0
2.0.1 - 2023-12-29
Patches
- (perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b
  Adds 5 bytes (+2%) for ~3% avg performance gain
  Thank you @ jalalazimi
Chores
- Update module size: bf64e71
- Update benchmark results: 855eec2, 6e3b2b9,
- Replace nyc with c8 in CI: 6e2468e
- Update Node CI matrix: 308a238
- Fix readme typos (#76, #82): 42354d3, 4c9a55d
  Thank you @ andipaetzold and @ acusti
Full Changelog: v2.0.0...v2.0.1
2.0.0 - 2023-07-15
Breaking
- Add "exports" map for native ESM support (#57): 3ec8e9f, 0949868
  Also supports TypeScript's node16/nodenext module resolution
  Maintains CommonJS support (with fixed TS definitions)
  Thank you @ remcohaszing~!
Chores
- Add Tailwind Support section to README (#65, #68): 496db1d, 4a4eadd
  Thank you @ kevinlowe0x3F7 & @ kevinlowe0x3F7
- Add tests for numbers & variadic number arguments: c520353
- Update package module size: 03e1cf9
Full Changelog: v1.2.1...v2.0.0
2.0.0-next.0 - 2023-07-15
2.0.0-next.0
1.2.1 - 2022-07-06
Patches
- Ensure CommonJS and UMD entrypoints have the named clsx export too
Chores
- Build CJS & UMD files manually (#50): 3712966, 2114f5b
Full Changelog: v1.2.0...v1.2.1

from clsx GitHub release notes

Package name: framer-motion

from framer-motion GitHub release notes

Package name: meilisearch

0.41.0 - 2024-07-01
This version introduces features released on Meilisearch v1.9.0 🎉
Check out the changelog of Meilisearch v1.9.0 for more information on the changes.

🚀 Enhancements
- Add frequency matching strategy (#1670) @ the-sinner
```
client.index('movies').search('interstellar', { matchingStrategy: MatchingStrategies.FREQUENCY });
```
- Add rankingScoreThreshold in search (#1669) @ the-sinner and in searchGet (#1673) @ mdubus
```
client.index('movies').search('badman', { rankingScoreThreshold: 0.2 });
client.index('movies').searchGet('badman', { rankingScoreThreshold: 0.2 });
```
- feat: add attribute at search (#1676) @ mdubus
```
client.index('movies').search('', { distinct: 'genre' });
```
- feat: get similar documents (#1677) @ mdubus
```
client.index('movies').searchSimilarDocuments({ id: 'target-document-id' });
```
- feat: hybrid search changes (#1679) @ mdubus
```
client.index('movies').getDocuments({ retrieveVectors: true });
```
🔒 Security
- build(deps): bump ws from 5.2.3 to 5.2.4 in /playgrounds/javascript (#1672)
⚙️ Maintenance/misc
- Remove unneeded comments from config files (#1657) @ flevi29
- Fix release version check script (#1681) @ curquiza
Thanks again to @ brunoocasali, @ curquiza, @ flevi29, @ mdubus, and @ the-sinner! 🎉
0.40.0 - 2024-05-15
💥 Breaking Changes
- Fix the issue introduced in the v0.39 that affected vite apps #1652 @ brunoocasali
- Now to use the generateTenantToken you should use it with await:
  before:
```
const token = client.generateTenantToken(apiKeyUid, searchRules, {
    apiKey: apiKey,
    expiresAt: expiresAt,
  })
```
  after:
```
const token = await client.generateTenantToken(apiKeyUid, searchRules, {
    apiKey: apiKey,
    expiresAt: expiresAt,
  })
```
⚙️ Maintenance/misc
- Update readme links to the documentation (#1650) @ mdubus
Thanks again to @ brunoocasali, @ mdubus! 🎉
0.39.0 - 2024-05-06
🚀 Enhancements
- feat: hybrid search improvements for v1.8.x (#1647) @ mdubus
- Add null to Embedder type (#1646) @ amit-ksh
- Add searchCutoffMs index setting (#1643, #1645) @ amit-ksh
```
client.index('movies').getSearchCutoffMs()
client.index('movies').updateSearchCutoffMs(150)
client.index('movies').resetSearchCutoffMs()
```
⚠️ if you're using vite to build your front-end app, you must add this to your configuration (see more info here #1649)
```
export default defineConfig({
  plugins: [vue()],
  build: {
    rollupOptions: {
      external: ['crypto'], // this is the important part
    },
  },
})
```
Otherwise, you'll face errors like Module "crypto" has been externalized for browser compatibility.

⚙️ Maintenance/misc
- Update ESLint, Prettier, TypeScript and fix/improve their configuration files (#1616) @ flevi29
- Fix code style after configuration changes (

Snyk has created this PR to upgrade: - @vercel/analytics from 0.1.11 to 1.3.1. See this package in npm: https://www.npmjs.com/package/@vercel/analytics - clsx from 1.2.1 to 2.1.1. See this package in npm: https://www.npmjs.com/package/clsx - framer-motion from 10.18.0 to 11.3.28. See this package in npm: https://www.npmjs.com/package/framer-motion - meilisearch from 0.31.1 to 0.41.0. See this package in npm: https://www.npmjs.com/package/meilisearch - next from 13.5.6 to 14.2.5. See this package in npm: https://www.npmjs.com/package/next - next-themes from 0.2.1 to 0.3.0. See this package in npm: https://www.npmjs.com/package/next-themes - openai from 3.3.0 to 4.56.0. See this package in npm: https://www.npmjs.com/package/openai - p-map from 5.5.0 to 7.0.2. See this package in npm: https://www.npmjs.com/package/p-map - pinecone-client from 1.1.2 to 2.0.0. See this package in npm: https://www.npmjs.com/package/pinecone-client - quick-lru from 6.1.2 to 7.0.0. See this package in npm: https://www.npmjs.com/package/quick-lru - react-spinners from 0.13.8 to 0.14.1. See this package in npm: https://www.npmjs.com/package/react-spinners - unified from 10.1.2 to 11.0.5. See this package in npm: https://www.npmjs.com/package/unified - rehype-format from 4.0.1 to 5.0.0. See this package in npm: https://www.npmjs.com/package/rehype-format - rehype-raw from 6.1.1 to 7.0.0. See this package in npm: https://www.npmjs.com/package/rehype-raw - rehype-stringify from 9.0.4 to 10.0.0. See this package in npm: https://www.npmjs.com/package/rehype-stringify - remark-gfm from 3.0.1 to 4.0.0. See this package in npm: https://www.npmjs.com/package/remark-gfm - remark-parse from 10.0.2 to 11.0.0. See this package in npm: https://www.npmjs.com/package/remark-parse - remark-rehype from 10.1.0 to 11.1.0. See this package in npm: https://www.npmjs.com/package/remark-rehype - remark-stringify from 10.0.3 to 11.0.0. See this package in npm: https://www.npmjs.com/package/remark-stringify See this project in Snyk: https://app.snyk.io/org/cachiman-inc/project/0ef9dc26-bbe1-4638-8f91-47d744105b51?utm_source=github&utm_medium=referral&page=upgrade-pr

google-cla · 2024-09-09T19:05:55Z

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , clsx, framer-motion, meilisearch, next, next-themes, openai, p-map, pinecone-client, quick-lru, react-spinners, unified, rehype-format, rehype-raw, rehype-stringify, remark-gfm, remark-parse, remark-rehype, remark-stringify #28

[Snyk] Upgrade: , clsx, framer-motion, meilisearch, next, next-themes, openai, p-map, pinecone-client, quick-lru, react-spinners, unified, rehype-format, rehype-raw, rehype-stringify, remark-gfm, remark-parse, remark-rehype, remark-stringify #28

WontonSam commented Sep 9, 2024

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

Patches

Chores

Features

Patches

Chores

Breaking

Chores

Patches

Chores

🚀 Enhancements

🔒 Security

⚙️ Maintenance/misc

💥 Breaking Changes

⚙️ Maintenance/misc

🚀 Enhancements

⚙️ Maintenance/misc

google-cla bot commented Sep 9, 2024

[Snyk] Upgrade: , clsx, framer-motion, meilisearch, next, next-themes, openai, p-map, pinecone-client, quick-lru, react-spinners, unified, rehype-format, rehype-raw, rehype-stringify, remark-gfm, remark-parse, remark-rehype, remark-stringify #28

Are you sure you want to change the base?

[Snyk] Upgrade: , clsx, framer-motion, meilisearch, next, next-themes, openai, p-map, pinecone-client, quick-lru, react-spinners, unified, rehype-format, rehype-raw, rehype-stringify, remark-gfm, remark-parse, remark-rehype, remark-stringify #28

Conversation

WontonSam commented Sep 9, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

Patches

Chores

Features

Patches

Chores

Breaking

Chores

Patches

Chores

🚀 Enhancements

🔒 Security

⚙️ Maintenance/misc

💥 Breaking Changes

⚙️ Maintenance/misc

🚀 Enhancements

⚙️ Maintenance/misc

google-cla bot commented Sep 9, 2024