Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade next from 10.0.7 to 10.2.3 #1320

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

yogendrajs
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade next from 10.0.7 to 10.2.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 91 versions ahead of your current version.

  • The recommended version was released on 3 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Information Exposure
SNYK-JS-NANOID-2332193
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
521 Proof of Concept
medium severity Remote Code Execution (RCE)
SNYK-JS-SHARP-2848109
521 No Known Exploit
critical severity Heap-based Buffer Overflow
SNYK-JS-SHARP-5922108
521 Mature
high severity Information Exposure
SNYK-JS-SIMPLEGET-2361683
521 Proof of Concept
high severity Information Exposure
SNYK-JS-SIMPLEGET-2361683
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1090595
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-POSTCSS-1255640
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
521 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-COLORSTRING-1082939
521 Proof of Concept
Release notes
Package name: next
  • 10.2.3 - 2021-05-24

    Core Changes

    • lazy load postcss plugins: #25317
    • Add missing i18n types in gip context: #25363
    • Ensure externals are correct for mini-css-extract-plugin: #25340
    • Update beforeFiles rewrites to continue: #25418

    Documentation Changes

    • Update docs to show how to typecheck next.config.js: #25240
    • docs: typo in rewrites page: #25377

    Example Changes

    • Fix PatternFly 4 example: #25356
    • Update package.json blog-starter-typescript: #25361
    • New kontent UI screenshots: #25387

    Misc Changes

    Credits

    Huge thanks to @ alexbrazier, @ jamsinclair, @ sokra, @ fabianishere, @ rokinsky, @ ijjk, @ msidqi, @ rubensdemelo, and @ Simply007 for helping!

  • 10.2.3-canary.1 - 2021-05-24

    Core Changes

    • Update beforeFiles rewrites to continue: #25418

    Example Changes

    • New kontent UI screenshots: #25387

    Credits

    Huge thanks to @ Simply007 for helping!

  • 10.2.3-canary.0 - 2021-05-24

    Core Changes

    • lazy load postcss plugins: #25317
    • Add missing i18n types in gip context: #25363
    • Ensure externals are correct for mini-css-extract-plugin: #25340

    Documentation Changes

    • Update docs to show how to typecheck next.config.js: #25240
    • docs: typo in rewrites page: #25377

    Example Changes

    • Fix PatternFly 4 example: #25356
    • Update package.json blog-starter-typescript: #25361

    Misc Changes

    Credits

    Huge thanks to @ alexbrazier, @ jamsinclair, @ sokra, @ fabianishere, @ rokinsky, @ ijjk, @ msidqi, and @ rubensdemelo for helping!

  • 10.2.2 - 2021-05-20

    Core Changes

    • server doesn't need to be contenthashing at all: #25251
    • Update postcss-loader to 4.3.0: #25197
    • restore webpack defaults for managed/immutablePaths: #25250
    • react-loadable-plugin. Handle undefined opts.caller: #25264

    Documentation Changes

    • doc(typescript.md) Mention incremental type checking: #25268

    Misc Changes

    • Ensure CNA install succeeds with npm and example flags: #25267
    • Update output size test to handle version change: #25275
    • Update the text for eslint/no-page-custom-font rule: #25117

    Credits

    Huge thanks to @ sokra, @ bradlc, @ SinimaWath, and @ rgabs for helping!

  • 10.2.2-canary.1 - 2021-05-19

    Misc Changes

    • Update output size test to handle version change: #25275
    • Update the text for eslint/no-page-custom-font rule: #25117

    Credits

    Huge thanks to @ rgabs for helping!

  • 10.2.2-canary.0 - 2021-05-19

    Core Changes

    • server doesn't need to be contenthashing at all: #25251
    • Update postcss-loader to 4.3.0: #25197
    • restore webpack defaults for managed/immutablePaths: #25250
    • react-loadable-plugin. Handle undefined opts.caller: #25264

    Documentation Changes

    • doc(typescript.md) Mention incremental type checking: #25268

    Misc Changes

    • Ensure CNA install succeeds with npm and example flags: #25267

    Credits

    Huge thanks to @ sokra, @ bradlc, and @ SinimaWath for helping!

  • 10.2.1 - 2021-05-19

    Core Changes

    • Remove unnecessary optimizeFonts key from type: #24563
    • Fix Image compatibility issue when using sizes: #24569
    • Replace regex lexer with minimal regex for named groups: #24604
    • Remove un-used lib files: #24625
    • Adds ESLint with default rule-set: #23702
    • Don't swallow MODULE_NOT_FOUND error: #24577
    • Fix/link router 24075 take asPath instead of pathName in router: #24199
    • Add experimental blurry placeholder to image component: #24153
    • update webpack to 5.36.2, use dependOn: #24656
    • Add type checking events: #24595
    • fix memory leak in require.cache: #24282
    • Don't throw 500 error when Content-type is invalid: #24818
    • Land - Font optimizations - Adobe Fonts / Typekit support : #24834
    • updated zustand example : #24884
    • feat(build): Log whether type checking is actually performed: #24440
    • webpack 5 externals fixes: #24603
    • Remove experimental babel flag: #24776
    • cache typechecking with incremental compilation: #24559
    • Ensure next/dynamic transpiles for tests: #24751
    • fix: handle compression for custom-server render calls (#16378): #18891
    • Refactor experimental-script component : #24940
    • Fix: Non-writable pages/_app breaks build : #24849
    • I18n context initial props: #21930
    • update webpack to 5.37.0: #24954
    • Ensure webpack cache is invalidated for alias change: #24956

    Documentation Changes

    • Add documentation on Font Optimization.: #24572
    • Clarify whether router.pathname includes basePath: #24675
    • Update font optimization docs to mention opting out.: #24756
    • Bumps version of supertokens dependencies and updates its README: #24571
    • docs(response-helpers): Update res.json definition: #24782
    • docs(next/router): Update router.push api: #24833
    • docs(config intro): Fix github link hash: #24838
    • Add version note for has property: #24836
    • Remove old docs sections: #24853
    • Add additional reason for the Prerender Error when running next export: #24828
    • feat(create-next-app): add --ts, --typescript support: #24655
    • ESLint Plugin: Disallow <title> in Head from next/document: #24868
    • Clarify rewrites and other docs cleanup.: #24890
    • ESLint Plugin: Google Font rules: #24766
    • ESLint Plugin: passHref is not assigned: #24670
    • ESLint Plugin: Custom Font at page-level rule: #24789
    • ESLint Plugin: Prevent bad imports of next/document and next/head: #24832

    Example Changes

    • Fix: with-passport example dependency issue: #24567
    • demo serving storybook static build with serve: #24812
    • Update signin/signup form samples: #24524
    • react-hook-form example: #21245
    • Update example with-sentry: #24819
    • Update custom server examples: #24814
    • Remove outdated/deprecated/unmainted examples: #24945
    • Fix build in blog-starter-typescript example: #24695
    • Update with-three-js example: #24857
    • Update with-mdx-remote example: #24973

    Misc Changes

    • fix(next-storybook): make rules an array in webpack config: #22125
    • Fix rewrite shape in Storybook: #24827
    • Match last PR mention in commit message for release notes
    • Add label for chrome automatically to PR

    Credits

    Huge thanks to @ darshkpatel, @ leerob, @ sumanthratna, @ shuding, @ housseindjirdeh, @ PepijnSenders, @ prophet1996, @ Joonpark13, @ tremby, @ sokra, @ stefanprobst, @ dopt, @ rishabhpoddar, @ aydinkn, @ ErfanMirzapour, @ vitalybaev, @ ijjk, @ tubbo, @ frontendtony, @ eric-burel, @ ctjlewis, @ Munawwar, @ iker-barriocanal, @ eps1lon, @ janicklas-ralph, @ Gigiz, @ MPLIS, @ HaNdTriX, and @ jigsawye for helping!

  • 10.2.1-canary.12 - 2021-05-19

    Core Changes

    • Fix font optimization failing on some builds: #25071

    Documentation Changes

    • Remove snippet that is not recommended.: #25220

    Misc Changes

    • test(create-next-app): assert for typescript template dependencies: #25214

    Credits

    Huge thanks to @ jamesgeorge007, @ timneutkens, and @ janicklas-ralph for helping!

  • 10.2.1-canary.11 - 2021-05-18

    Core Changes

    • Fix typo in dev-build-watcher.js: #25196
    • Ensure default params are detected after rewrite: #25205
    • fix: replace usage of fromEntries in browser bundled resolve-rewrites.ts: #25208
    • docs(readme.md): add good first issue section to readme.md: #25085
    • Make next.config.js keys optional: #25204

    Documentation Changes

    • Add default revalidate value to docs: #25238

    Example Changes

    • fix responsive example tailwind: #24582

    Credits

    Huge thanks to @ eltociear, @ jamsinclair, @ ananta, @ holiq, and @ PepijnSenders for helping!

  • 10.2.1-canary.10 - 2021-05-17

    Core Changes

    • Ensure server split chunks are nested in chunks dir: #25203

    Documentation Changes

    • ESLint Plugin: Image rules : #23402

    Credits

    Huge thanks to @ housseindjirdeh for helping!

  • 10.2.1-canary.9 - 2021-05-17
  • 10.2.1-canary.8 - 2021-05-14
  • 10.2.1-canary.7 - 2021-05-14
  • 10.2.1-canary.6 - 2021-05-13
  • 10.2.1-canary.5 - 2021-05-11
  • 10.2.1-canary.4 - 2021-05-10
  • 10.2.1-canary.3 - 2021-05-07
  • 10.2.1-canary.2 - 2021-04-30
  • 10.2.1-canary.1...

Snyk has created this PR to upgrade next from 10.0.7 to 10.2.3.

See this package in npm:
next

See this project in Snyk:
https://app.snyk.io/org/yogendra-90g/project/eed63132-b98f-422b-8ac4-769cfbae275e?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants