fix(deps): update dependencies (non-major) #1338
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@codesandbox/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected] |
Lighthouse Report✨ https://blog-k64h1zoac-sabertazs-projects.vercel.app/🚀 Vercel preview deployment
✨ https://blog-k64h1zoac-sabertazs-projects.vercel.app/posts🚀 Vercel preview deployment
✨ https://blog-k64h1zoac-sabertazs-projects.vercel.app/tags🚀 Vercel preview deployment
✨ https://blog-k64h1zoac-sabertazs-projects.vercel.app/books🚀 Vercel preview deployment
✨ https://blog-k64h1zoac-sabertazs-projects.vercel.app/about🚀 Vercel preview deployment
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1338 +/- ##
=======================================
Coverage 95.33% 95.33%
=======================================
Files 179 179
Lines 857 857
Branches 88 85 -3
=======================================
Hits 817 817
- Misses 32 36 +4
+ Partials 8 4 -4 ☔ View full report in Codecov by Sentry. 🚨 Try these New Features:
|
renovate
bot
force-pushed
the
renovate/dependencies
branch
from
4b518ed to
0758da2
Compare
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is protestware?This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function. Consider that consuming this package may come along with functionality unrelated to its primary purpose. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
This PR contains the following updates:
^2.19.9->^2.19.105.22.1->5.22.2^5.6.3->^5.7.2Release Notes
codesandbox/sandpack (@codesandbox/sandpack-react)
v2.19.10Compare Source
Bug Fixes
ant-design/ant-design (antd)
v5.22.2Compare Source
microsoft/TypeScript (typescript)
v5.7.2Compare Source
Configuration
📅 Schedule: Branch creation - "every weekend" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.