fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@next/bundle-analyzer	13.4.5 -> 13.4.7					dependencies	patch
@typescript-eslint/eslint-plugin	5.59.11 -> 5.60.0					devDependencies	minor
@typescript-eslint/parser	5.59.11 -> 5.60.0					devDependencies	minor
@vitejs/plugin-react (source)	4.0.0 -> 4.0.1					devDependencies	patch
eslint (source)	8.42.0 -> 8.43.0					devDependencies	minor
eslint-config-next (source)	13.4.5 -> 13.4.7					devDependencies	patch
next (source)	13.4.5 -> 13.4.7					dependencies	patch
node	18.16.0 -> 18.16.1					volta	patch
rehype-pretty-code (source)	0.9.8 -> 0.9.11					dependencies	patch
stylelint (source)	15.7.0 -> 15.8.0					devDependencies	minor
tailwind-merge	1.13.1 -> 1.13.2					dependencies	patch
vercel (source)	30.2.2 -> 30.2.3					devDependencies	patch
vitest	0.32.0 -> 0.32.2					devDependencies	patch

---

Release Notes

vercel/next.js

v13.4.7

Compare Source

Core Changes

• Route Module Updates Redux: #​51373
• Lock down server IPC address: #​51378
• Revert "Route Module Updates Redux": #​51409
• Fix bundling of Server Actions: #​51367
• Fix pnpm lock: #​51503
• router: add layout and other file supports to parallel routes: #​51413
• Next Build Turbo POC: #​49942
• add edge rendering for app dir for Turbopack: #​50830
• Fix shared action module in two layers: #​51510
• Revert "Next Build Turbo POC (#​49942)": #​51538
• Fix font styles on react dev overlay: #​51518
• fix typo in x-next-revalidate-tag-token header: #​51432
• Add docs links to RSC errors: #​51557
• Moved new line to warnOnce call: #​51552
• Update id env prefix: #​51588
• router: support layout/special files as direct children of parallel routes: #​51604
• use env var to switch next.js to turbopack mode: #​51353
• Revert "add edge rendering for app dir for Turbopack": #​51617
• Ensure upgrade request has request meta: #​51590
• Revert "Fix standalone not found": #​51506

Documentation Changes

• docs: Add streaming AI example.: #​51382
• docs: remove copy mentioning appDir as an experimental feature: #​51403
• examples: update with-supabase example to App Router: #​51335
• Fix typo in image alt: #​51487
• docs: add better examples to next/image docs.: #​51457
• Go directly to caching section: #​51501
• fix(typo): add missing word: #​51490
• fix(typo): add missing comma: #​51489
• Remove duplicate bullet point in app router migration docs: #​51440
• fix: missing come: #​51437
• Linted MDX: #​51530
• docs: Fix typo: #​51517
• Migrate validate links script from next-site and setup GitHub action: #​51365
• Remove extra word in env key error: #​51512
• Remove duplicate word in 11-draft-mode.mdx: #​51580
• Broken link at 01-static-and-dynamic-rendering.mdx: #​51582
• refactor tests for readability: #​51051

Example Changes

• Upgrade with-redux example to app router: #​49994

Misc Changes

• ci(workflow): upload test trace for deploy e2e: #​51389
• Fix pnpm ERR_INVALID_THIS on Node 20: #​51406
• Update flakey build output test: #​51411
• Fix native build: #​51522
• Revert "Fix pnpm ERR_INVALID_THIS on Node 20": #​51539
• Update .vercel.approvers: #​51417
• Update broken link validator: #​51586
• Temporarily disable flaky test: #​51616
• Update flakey build output test: #​51625

Credits

Huge thanks to @​wyattjoh, @​ijjk, @​dvakatsiienko, @​leerob, @​kwonoj, @​nickmccurdy, @​brunoeduardodev, @​dijonmusters, @​shuding, @​tyler-lutz, @​huozhi, @​feedthejim, @​alexkirsz, @​sonam-serchan, @​vicsantizo, @​leodr, @​wiscaksono, @​sokra, @​delbaoliveira, @​ztanner, @​hustLer2k, @​joshuabaker, and @​ForsakenHarmony for helping!

v13.4.6

Compare Source

Core Changes

• Fix windows metadata slashes: #​51088
• Do not merge chunkGroups' CSS files: #​51103
• Add unique search query for RSC requests to be cacable on CDN: #​50970
• add turbopack integration tests to CI: #​50904
• Add option for debugging CPU usage: #​51174
• Prefer module fields for RSC server layer: #​51179
• Update next/head warning to link to the correct docs page: #​51013
• Revert "Do not merge chunkGroups' CSS files": #​51193
• fix: helpful error when output: export and next export -o: #​51191
• Strip _rsc query for navigation between app and page: #​51195
• Fix standalone not found: #​51172
• fix(cli): add all available options to cli commands, format them consistently: #​48708
• update storybook example (copy from vercel/vercel): #​50865
• chore: remove useless duplicate code: #​50705
• fix: app router hash scrolling should respect scroll-padding: #​51268
• Fix build error about trace file and edge route: #​50808
• chore(router): fix typo in comment: #​50581
• Add mikroORM to external package list: #​50487
• [docs] Clarify that merely changing extension does not load .md f…: #​49785
• Correct build workers perf issue: #​51271
• Remove edge functions tracking in dev server: #​51122
• app router: fix double fetch on prefetch={false}: #​51292
• Invalidate client cache when cookies have changed in Server Actions: #​51290
• feat(turbopack): enable sassOptions: #​51259
• Route Module Cleanup: #​50936
• Validate i18n locale domain: #​50220
• chore: add dark mode for dev overlay: #​48601
• chore: update next/font/google font list: #​49969
• fix: Incorrect build size outputs for app dir: #​50768
• Simplify server CSS handling: #​51018
• Allow configuring analyzerMode in bundle-analyzer: #​47468
• Revert "Prefer module fields for RSC server layer": #​51316
• Fix Server Actions compiler: #​51318
• Revert "Route Module Cleanup": #​51322
• test(next-dev): hard fail if next-dev runs with turbopack intenral flag: #​51308
• Revert "test(next-dev): hard fail if next-dev runs with turbopack intenral flag": #​51327
• Update Next.js code owners: #​51319
• Fix CSS deploy id case: #​51325
• Update turbopack: #​51336
• Fix shared layer bundling in Edge Runtime: #​51348

Documentation Changes

• Update 01-images.mdx: #​51133
• Update next-image-unconfigured-host.md with correct Remote Patterns Documentation link to new docs: #​49750
• Fixes the link from components/fonts to api/fonts: #​51169
• Docs: Fix useSearchParams link: #​51151
• docs: Improve Actions docs.: #​51145
• docs: clarify usePathname usage as client hook.: #​51146
• Fix a typo: #​51176
• docs: fix prettier error: #​51182
• Update static assets page to filter out information: #​51180
• Makes codeblock language and filename extensions consistent: #​51056
• Fix a mistake URL in "docs/generate-metadata.mdx/metadataBase": #​51199
• Add separate lines to eslint prompt in 02-eslint.mdx: #​51143
• [Docs][CSS-in-JS]: Update Vanilla Extract link: #​51192
• Fix typo on strategy: #​51189
• app-icons: correct valid route segments for icon/favicon/apple-icon : #​51188
• docs: fix typos: #​51185
• Adds Note to Good to know consistency: #​51080
• docs: fix prettier lint: #​51222
• [docs] Add missing Edge Runtime APIs: #​51224
• docs: Add Tolgee to internationalization section: #​49754
• Clarify the limitations of NEXT_PUBLIC_: #​49105
• Update 02-fonts.mdx: #​51249
• Fix middleware documentation: #​48876
• docs: fixed a typo in parallel routes: #​51267
• Update module-path-aliases.md: #​43592
• CSS concatenation order matches the import order: #​39889
• Fix broken link: #​51281
• Fix broken links: #​51285
• Update images.mdx: #​51275
• Docs: Remove extra word in 03-scripts.mdx: #​51304
• Update example of Server Actions HoC: #​51299
• Adds env suggestions: #​51312
• docs: fix the url of router event: #​51339

Example Changes

• Fix with typescript stripe example fixes #​50541: #​50574
• fix: cypress component testing - fixes #​50283: #​50303
• fix deprecated configureStore in with-redux-saga example: #​50342
• Show how to utilize the provided .env file in the docker-compose file: #​50712
• update(examples): Update with-sentry example: #​47855
• Update Player.tsx to improve code readability and styling.: #​50275
• Update Docker examples to use Compose v2 command: #​51134
• with-facebook-pixel: new implementation with app folder: #​49880
• change strapi example to latest one - fixes #​51332: #​51334
• Auth0 V2 migration update: #​45302
• examples: migrate with-elasticsearch to TypeScript: #​44842

Misc Changes

• Fix getting last stable release stats: #​51106
• ci(workflow): consolidate bytesize upload workflow: #​51110
• ci(workflow): enable test trace upload: #​51107
• Increase remote cache timeout for swc builds: #​51270
• Update flakey rsc streaming test: #​51274
• fix trigger release step
• Update flakey build output test: #​51307
• Skip cargo bench job on release: #​51311
• Ensure swc is copied for release stats: #​51315
• Update flakey deploy tests: #​51314
• Update e2e deploy tests to continue: #​51321

Credits

Huge thanks to @​ijjk, @​huozhi, @​kwonoj, @​shuding, @​shozibabbas, @​omarhoumz, @​jamespearson, @​tristndev, @​sokra, @​leerob, @​AldeonMoriak, @​delbaoliveira, @​manovotny, @​styfle, @​mirismaili, @​tyler-lutz, @​SuttonJack, @​jeremydouglas, @​MaxLeiter, @​Kikobeats, @​JanCizmar, @​mltsy, @​WilderDev, @​Guilleo03, @​Willem-Jaap, @​escwxyz, @​wiredacorn, @​Ethan-Arrowood, @​BaffinLee, @​ztanner, @​greatSumini, @​ciruz, @​kijikunnn, @​DustinsCode, @​riqwan, @​joostdecock, @​nikolovlazar, @​Bowens20832, @​JohnAlbin, @​timneutkens, @​feedthejim, @​wyattjoh, @​gidgudgod, @​maxproske, @​dunklesToast, @​yyuemii, @​mPaella, @​mknichel, @​niko20, @​jyunhanlin, @​mkcy3, and @​valentinpolitov for helping!

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v5.60.0

Compare Source

Features

• eslint-plugin: [restrict-plus-operands] add allow* options (#​6161) (def09f8)

5.59.11 (2023-06-12)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.10 (2023-06-12)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.9 (2023-06-05)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.8 (2023-05-29)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.7 (2023-05-22)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.6 (2023-05-15)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.5 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.4 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.3 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.2 (2023-05-01)

Note: Version bump only for package @​typescript-eslint/eslint-plugin

5.59.1 (2023-04-24)

Bug Fixes

• eslint-plugin: [prefer-regexp-exec] skip malformed regexes (#​6935) (05ed60e)
• eslint-plugin: [unified-signatures] no parameters function (#​6940) (2970861)

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v5.60.0

Compare Source

Note: Version bump only for package @​typescript-eslint/parser

5.59.11 (2023-06-12)

Note: Version bump only for package @​typescript-eslint/parser

5.59.10 (2023-06-12)

Note: Version bump only for package @​typescript-eslint/parser

5.59.9 (2023-06-05)

Note: Version bump only for package @​typescript-eslint/parser

5.59.8 (2023-05-29)

Note: Version bump only for package @​typescript-eslint/parser

5.59.7 (2023-05-22)

Note: Version bump only for package @​typescript-eslint/parser

5.59.6 (2023-05-15)

Note: Version bump only for package @​typescript-eslint/parser

5.59.5 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/parser

5.59.4 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/parser

5.59.3 (2023-05-08)

Note: Version bump only for package @​typescript-eslint/parser

5.59.2 (2023-05-01)

Note: Version bump only for package @​typescript-eslint/parser

5.59.1 (2023-04-24)

Note: Version bump only for package @​typescript-eslint/parser

vitejs/vite-plugin-react

v4.0.1

Compare Source

• Support Vitest deps.experimentalOptimizer
• Support using components inside web workers (#​181)

eslint/eslint

v8.43.0

Compare Source

Features

• 14581ff feat: directive prologue detection and autofix condition in quotes (#​17284) (Francesco Trotta)
• e50fac3 feat: add declaration loc to message in block-scoped-var (#​17252) (Milos Djermanovic)
• 1b7faf0 feat: add skipJSXText option to no-irregular-whitespace rule (#​17182) (Azat S)

Bug Fixes

• 5338b56 fix: normalize cwd passed to ESLint/FlatESLint constructor (#​17277) (Milos Djermanovic)
• 54383e6 fix: Remove no-extra-parens autofix for potential directives (#​17022) (Francesco Trotta)

Documentation

• 8b855ea docs: resubmit pr17061 doc changes (#​17292) (唯然)
• 372722e docs: resubmit pr17012 doc changes (#​17293) (唯然)
• 67e7af3 docs: resubmit custom-rules doc changes (#​17294) (唯然)
• 9e3d77c docs: Resubmit Fix formatting in Custom Rules docs (#​17281) (Milos Djermanovic)
• 503647a docs: Resubmit markVariableAsUsed docs (#​17280) (Nicholas C. Zakas)
• e0cf0d8 docs: Custom rule & plugin tutorial (#​17024) (Ben Perlmutter)
• 8e51ea9 docs: resubmit no-new rule documentation (#​17264) (Nitin Kumar)
• 1b217f8 docs: resubmit Custom Processors documentation (#​17265) (Nitin Kumar)
• 428fc76 docs: resubmit Create Plugins documentation (#​17268) (Nitin Kumar)
• bdca88c docs: resubmit Configuration Files documentation (#​17267) (Nitin Kumar)
• f5c01f2 docs: resubmit Manage Issues documentation (#​17266) (Nitin Kumar)
• b199295 docs: Resubmit custom rules update docs (#​17273) (Ben Perlmutter)
• 0e9980c docs: add new omitLastInOneLineClassBody option to the semi rule (#​17263) (Nitin Kumar)
• cb2560f docs: Resubmit getScope/getDeclaredVariables docs (#​17262) (Nicholas C. Zakas)
• 85d2b30 docs: explain how to include predefined globals (#​17261) (Marcus Wyatt)
• de4d3c1 docs: update flat config default ignore patterns (#​17258) (Milos Djermanovic)
• 3912f3a docs: Improve ignores documentation (#​17239) (Francesco Trotta)
• 35e11d3 docs: fix typos and missing info (#​17257) (Ed Lucas)
• 0bc257c docs: Clarify no-div-regex rule docs (#​17051) (#​17255) (Francesco Trotta)
• 788d836 docs: add references to MIT License (#​17248) (Milos Djermanovic)
• 58aab6b docs: Update README (GitHub Actions Bot)
• 3ef5814 docs: Revert all changes after the license change (#​17227) (Milos Djermanovic)
• 03fc4aa docs: Update README (GitHub Actions Bot)

Chores

• 78350f6 chore: upgrade @​eslint/js@​8.43.0 (#​17295) (Milos Djermanovic)
• 62bf759 chore: package.json update for @​eslint/js release (ESLint Jenkins)
• e0a2448 chore: docs package.license ISC => MIT (#​17254) (唯然)
• 6a0196c chore: use eslint-plugin-eslint-plugin flat configs (#​17204) (Milos Djermanovic)

nodejs/node

v18.16.1: 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

• CVE-2023-30581: mainModule.__proto__ Bypass Experimental Policy Mechanism (High)
• CVE-2023-30585: Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
• CVE-2023-30588: Process interuption due to invalid Public Key information in x509 certificates (Medium)
• CVE-2023-30589: HTTP Request Smuggling via Empty headers separated by CR (Medium)
• CVE-2023-30590: DiffieHellman does not generate keys after setting a private key (Medium)
• OpenSSL Security Releases
  • OpenSSL security advisory 28th March.
  • OpenSSL security advisory 20th April.
  • OpenSSL security advisory 30th May
• c-ares vulnerabilities:
  • GHSA-9g78-jv2r-p7vc
  • GHSA-8r8p-23f3-64c2
  • GHSA-54xr-f67r-4pc4
  • GHSA-x6mf-cxr9-8q6v

More detailed information on each of the vulnerabilities can be found in June 2023 Security Releases blog post.

Commits

• [bf3e2c8928] - crypto: handle cert with invalid SPKI gracefully (Tobias Nießen) nodejs-private/node-private#​393
• [70f9449072] - deps: set CARES_RANDOM_FILE for c-ares (Richard Lau) #​48156
• [35d4efb57b] - deps: update c-ares to 1.19.1 (RafaelGSS) #​48115
• [392dfedc77] - deps: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) #​48402
• [46cd5fe38b] - deps: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) #​48402
• [7e3d2d85c2] - doc,test: clarify behavior of DH generateKeys (Tobias Nießen) nodejs-private/node-private#​426
• [4ff6ba050a] - http: disable request smuggling via rempty headers (Paolo Insogna) nodejs-private/node-private#​428
• [ab269129a6] - msi: do not create AppData\Roaming\npm (Tobias Nießen) nodejs-private/node-private#​408
• [925e8f5619] - policy: handle mainModule.__proto__ bypass (RafaelGSS) nodejs-private/node-private#​416
• [d6fae8e47e] - test: allow SIGBUS in signal-handler abort test (Michaël Zasso) #​47851

atomiks/rehype-pretty-code

v0.9.11

Compare Source

   🐞 Bug Fixes

• Types  -  by @​atomiks (932d8)

    View changes on GitHub

v0.9.10

Compare Source

   🐞 Bug Fixes

• VisitableElement import  -  by @​atomiks (10f55)
• Unified in bundle  -  by @​atomiks (64c85)
• build: Resolve .js ext  -  by @​atomiks (1841c)

    View changes on GitHub

v0.9.9

Compare Source

   🚀 Features

• Set up release process
• Convert to TS

    View changes on GitHub

stylelint/stylelint

v15.8.0

Compare Source

• Added: media-feature-name-value-no-unknown (#​6906) (@​romainmenke).
• Added: support for .mjs configuration files (#​6910) (@​ybiquitous).
• Fixed: --print-config description in CLI help (#​6914) (@​ybiquitous).
• Fixed: allowEmptyInput option in configuration files (#​6929) (@​ybiquitous).
• Fixed: custom-property-no-missing-var-function performance (#​6922) (@​romainmenke).
• Fixed: function-calc-no-unspaced-operator performance (#​6923) (@​romainmenke).
• Fixed: function-linear-gradient-no-nonstandard-direction performance (#​6924) (@​romainmenke).
• Fixed: function-no-unknown false positives for SCSS functions with namespace (#​6921) (@​romainmenke).
• Fixed: max-nesting-depth error for at-rules in Sass syntax (#​6909) (@​ybiquitous).
• Fixed: selector-anb-no-unmatchable performance (#​6925) (@​romainmenke).
• Fixed: remove v8-compile-cache dependency (#​6907) (@​ybiquitous).

dcastil/tailwind-merge

v1.13.2

Compare Source

Bug Fixes

• Fix grammar and typos in docs by @​jmmarco in https://github.com/dcastil/tailwind-merge/pull/249
• Fix TypeScript issue when using moduleResolution: node16 by @​LiamMartens in https://github.com/dcastil/tailwind-merge/pull/245

Other

• Add tailwind-merge-php to similar packages in docs by @​JamesHemery in https://github.com/dcastil/tailwind-merge/pull/246

Full Changelog: dcastil/tailwind-merge@v1.13.1...v1.13.2

Thanks to @​bluetch for sponsoring tailwind-merge! ❤️

vercel/vercel

v30.2.3

Compare Source

Patch Changes

• [cli] do not force auto-assign value on deployments (#​10110)

• Updated dependencies [91406abdb, 2230ea6cc, 8b3a4146a]:

  • @​vercel/node@​2.15.2
  • @​vercel/remix-builder@​1.8.14
  • @​vercel/static-build@​1.3.37

vitest-dev/vitest

v0.32.2

Compare Source

   🐞 Bug Fixes

• browser: Don't fail on importing diff-sequences  -  by @​sheremet-va (00b0e)

    View changes on GitHub

v0.32.1

Compare Source

   🚀 Features

• Export registerConsoleShortcuts from vitest/node  -  by @​deot in https://github.com/vitest-dev/vitest/issues/3563 (bc49b)
• expect: Support expect.unreachable  -  by @​fenghan34 and @​sheremet-va in https://github.com/vitest-dev/vitest/issues/3556 (8e385)
• runner: describe/test name support anonymous function  -  by @​btea in https://github.com/vitest-dev/vitest/issues/3562 (3d436)

   🐞 Bug Fixes

• Avoid call stack recursion with large error (fix: #​3060)  -  by @​nathanmmiller and @​sheremet-va in [https://github.com/fix: avoid call stack recursion with large error (fix: #3060) vitest-dev/vitest#3078](https://togithub.com/vitest

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
blog	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jun 22, 2023 6:31am