Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update app dependencies (main) #2787

Merged
merged 1 commit into from
Mar 4, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 3, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@nuxt/devtools (source) ^2.1.1 -> ^2.1.3 age adoption passing confidence
@sanity/astro (source) ^3.2.5 -> ^3.2.6 age adoption passing confidence
@sanity/ui (source) 2.14.5 -> 2.15.2 age adoption passing confidence
framer-motion ^12.4.7 -> ^12.4.10 age adoption passing confidence
next-sanity (source) 9.8.60 -> 9.8.61 age adoption passing confidence
next-sanity (source) ^9.8.60 -> ^9.8.61 age adoption passing confidence

Release Notes

nuxt/devtools (@​nuxt/devtools)

v2.1.3

Compare Source

sanity-io/sanity-astro (@​sanity/astro)

v3.2.6

Compare Source

Bug Fixes
sanity-io/ui (@​sanity/ui)

v2.15.2

Compare Source

Bug Fixes

v2.15.1

Compare Source

Bug Fixes

v2.15.0

Compare Source

Features
motiondivision/motion (framer-motion)

v12.4.10

Compare Source

Fixed
  • Adding UMD bundles for motion-dom and motion-utils.

v12.4.9

Compare Source

Fixed
  • Fixed Reorder.Item reordering causing lostpointercapture event to fire.
sanity-io/next-sanity (next-sanity)

v9.8.61

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate using a curated preset maintained by Sanity. View repository job log here

@renovate renovate bot requested a review from a team as a code owner March 3, 2025 19:36
@renovate renovate bot enabled auto-merge (squash) March 3, 2025 19:36
Copy link

vercel bot commented Mar 3, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
live-visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-astro ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-next ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-next-with-i18n ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-nuxt ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-page-builder-demo ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-remix ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-storybook ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm
visual-editing-studio ✅ Ready (Inspect) Visit Preview Mar 4, 2025 1:21pm
visual-editing-svelte ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 4, 2025 1:21pm

Copy link

socket-security bot commented Mar 3, 2025

@renovate renovate bot force-pushed the renovate/main-app-dependencies branch from 7ad7c5a to b1df78a Compare March 3, 2025 21:14
@renovate renovate bot force-pushed the renovate/main-app-dependencies branch from b1df78a to bc0b57a Compare March 4, 2025 00:25
Copy link

socket-security bot commented Mar 4, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
License Policy Violation npm/[email protected]
  • License: CC-BY-SA-4.0 (package/dist/compiled/glob/LICENSE)
  • License: CC-BY-SA-4.0 (package/dist/compiled/glob/LICENSE)
⚠︎

View full report↗︎

Next steps

What is a license policy violation?

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@renovate renovate bot merged commit 50737b1 into main Mar 4, 2025
18 checks passed
@renovate renovate bot deleted the renovate/main-app-dependencies branch March 4, 2025 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant