shopmon icon indicating copy to clipboard operation
shopmon copied to clipboard

Published 20 hours ago • verified publisher icon FriendsOfShopware

fix(deps): bump the all group across 1 directory with 11 updates

Open dependabot[bot] opened this issue 6 months ago • 0 comments

Bumps the all group with 11 updates in the /api directory:

Package From To
@libsql/client 0.6.2 0.8.1
@passwordless-id/webauthn 1.6.1 2.0.2
drizzle-orm 0.31.2 0.32.1
hono 4.4.7 4.5.3
toucan-js 3.4.0 4.0.0
tsx 4.15.7 4.16.5
@biomejs/biome 1.8.2 1.8.3
@cloudflare/workers-types 4.20240620.0 4.20240729.0
drizzle-kit 0.22.7 0.23.1
typescript 5.5.2 5.5.4
wrangler 3.61.0 3.68.0

Updates @libsql/client from 0.6.2 to 0.8.1

Changelog

Sourced from @​libsql/client's changelog.

0.8.1 -- 2024-08-03

  • Fix embedded replica sync WAL index path name , which caused "No such file or directory" for local sync in some cases (#244).

0.8.0 -- 2024-07-30

  • No changes from 0.8.0-pre.1.

0.8.0-pre.1 -- 2024-07-18

0.7.0 -- 2024-06-25

  • Add configurable concurrency limit for parallel query execution (defaults to 20) to address socket hangup errors.
Commits
  • 29c32f4 0.8.1
  • c103045 Fix WAL index path for embedded replicas
  • ec412b9 0.8.0
  • 2f610d7 github: Disable Node install cache for Wasm build
  • 8215bb5 0.8.0-pre.1
  • 66d919a Merge pull request #236 from tursodatabase/execute-overloading
  • fa68b1e github: Fix docs path in pages workflow
  • c38dd9c github: Build libsql-core in docs workflow
  • 1240bcf Revert "Disable Node install cache from docs workflow"
  • c954526 Disable Node install cache from docs workflow
  • Additional commits viewable in compare view

Updates @passwordless-id/webauthn from 1.6.1 to 2.0.2

Release notes

Sourced from @​passwordless-id/webauthn's releases.

2.0.2

  • autocomplete flag and isAutocompleteAvailable()
  • allowCredentials also accepts list of credentials ids instead of {id: ..., transports: ...}
  • transports also returned as part of registration

2.0.1

  • Fixed type coutner => counter
  • Attempt at CommonJS build fix

2.0.0

At last, the new version is here! It now supports the most recent features like conditional UI and hints, has defaults that better support security keys and uses the default intermediate JSON format for a better interop with other libraries. For more details, consult the docs at https://webauthn.passwordless.id

1.6.2

No release notes provided.

Commits
  • 9860ef1 v2.0.2
  • 18c5051 conditional / mediation => autocomplete
  • e104419 fixes V2: authenticate() function doesn't handle string credentialIds #65
  • 1b5a792 Merge pull request #66 from hjaber/main
  • 616a3f2 Merge pull request #1 from hjaber/hjaber-patch-1
  • a3282d0 Fix Typo Docs Authenticate
  • cc46eee fixes Docs: Outdated client.authenticate() Response in V2 Documentation #63
  • 5f34cc9 funding info
  • 8fdc63a fixed CommonJS build?
  • ae8d670 Merge pull request #61 from davidfiala/main
  • Additional commits viewable in compare view

Updates drizzle-orm from 0.31.2 to 0.32.1

Release notes

Sourced from drizzle-orm's releases.

0.32.1

  • Fix typings for indexes and allow creating indexes on 3+ columns mixing columns and expressions - thanks @​lbguilherme!
  • Added support for "limit 0" in all dialects - closes #2011 - thanks @​sillvva!
  • Make inArray and notInArray accept empty list, closes #1295 - thanks @​RemiPeruto!
  • fix typo in lt typedoc - thanks @​dalechyn!
  • fix wrong example in README.md - thanks @​7flash!

0.32.0

Release notes for [email protected] and [email protected]

It's not mandatory to upgrade both packages, but if you want to use the new features in both queries and migrations, you will need to upgrade both packages

New Features

🎉 MySQL $returningId() function

MySQL itself doesn't have native support for RETURNING after using INSERT. There is only one way to do it for primary keys with autoincrement (or serial) types, where you can access insertId and affectedRows fields. We've prepared an automatic way for you to handle such cases with Drizzle and automatically receive all inserted IDs as separate objects

import { boolean, int, text, mysqlTable } from 'drizzle-orm/mysql-core';

const usersTable = mysqlTable('users', {
id: int('id').primaryKey(),
name: text('name').notNull(),
verified: boolean('verified').notNull().default(false),
});


const result = await db.insert(usersTable).values([{ name: 'John' }, { name: 'John1' }]).$returningId();
//    ^? { id: number }[]

Also with Drizzle, you can specify a primary key with $default function that will generate custom primary keys at runtime. We will also return those generated keys for you in the $returningId() call

import { varchar, text, mysqlTable } from 'drizzle-orm/mysql-core';
import { createId } from '@paralleldrive/cuid2';

const usersTableDefFn = mysqlTable('users_default_fn', {
customId: varchar('id', { length: 256 }).primaryKey().$defaultFn(createId),
name: text('name').notNull(),
});


const result = await db.insert(usersTableDefFn).values([{ name: 'John' }, { name: 'John1' }]).$returningId();
//  ^? { customId: string }[]

If there is no primary keys -> type will be {}[] for such queries

... (truncated)

Commits
  • 55231b0 Add 0.32.1 release notes
  • 341f17c Merge pull request #2574 from lbguilherme/patch-1
  • dcc13b8 Merge branch 'main' into patch-1
  • 026b9bb Merge pull request #2255 from sillvva/main
  • bd273a9 Merge branch 'main' into main
  • 32756ee Merge branch 'main' into patch-1
  • bdbadeb Merge pull request #2500 from 7flash/patch-1
  • adbe837 Merge branch 'main' into patch-1
  • 222d30c Merge pull request #2502 from RemiPeruto/feat/allow-empty-list-for-in-array-a...
  • bc71aad Merge branch 'main' into feat/allow-empty-list-for-in-array-and-not-in-array
  • Additional commits viewable in compare view

Updates hono from 4.4.7 to 4.5.3

Release notes

Sourced from hono's releases.

v4.5.3

What's Changed

New Contributors

Full Changelog: https://github.com/honojs/hono/compare/v4.5.2...v4.5.3

v4.5.2

What's Changed

Full Changelog: https://github.com/honojs/hono/compare/v4.5.1...v4.5.2

v4.5.1

What's Changed

New Contributors

Full Changelog: https://github.com/honojs/hono/compare/v4.5.0...v4.5.1

v4.5.0

Hono v4.5.0 is now available!

We have added three new built-in middleware. Now Hono is bringing 20 built-in middleware!

  1. Basic Authentication
  2. Bearer Authentication
  3. Body Limit
  4. Cache

... (truncated)

Commits
  • 1fafc7a v4.5.3
  • f0b012d fix(service-worker): refer to self.fetch correctly (#3200)
  • 43fe52c fix(jsx/dom): fix performance issue with adding many new node listings (#3205)
  • 3a56ec5 fix(jsx): fix handling of SVG elements in JSX. (#3204)
  • cdd48f4 fix(validator): support application/json with a charset (#3199)
  • 0417830 fix(validator): Add double quotation marks to multipart checker regex (#3195)
  • a63bcfd v4.5.2
  • 8da482a feat(secure-headers): remove "X-Powered-By" should be an option (#3177)
  • e8118e3 fix:(csrf) fix typo of csrf middleware (#3178)
  • 8dc9e48 fix(type): degradation of generic type handling (#3138)
  • Additional commits viewable in compare view

Updates toucan-js from 3.4.0 to 4.0.0

Release notes

Sourced from toucan-js's releases.

[email protected]

Major Changes

  • fce854c and c29ddfa: This release upgrades the underlying Sentry SDKs to v8.

    • Toucan now extends ScopeClass instead of Hub.
    • Class-based integrations have been removed in Sentry v8. Toucan adapts to this change by renaming:
      • Dedupe integration to dedupeIntegration
      • ExtraErrorData integration to extraErrorDataIntegration
      • RewriteFrames integration to rewriteFramesIntegration
      • SessionTiming integration to sessionTimingIntegration
      • LinkedErrors integration to linkedErrorsIntegration
      • RequestData integration to requestDataIntegration
    • Additionally, Transaction integration is no longer provided.
    • Toucan instance can now be deeply copied using Toucan.clone().

    Refer to Sentry v8 release notes and Sentry v7->v8 for additional context.

Special shout-out to @​timfish for their contribution 🚀

Commits

Updates tsx from 4.15.7 to 4.16.5

Release notes

Sourced from tsx's releases.

v4.16.5

4.16.5 (2024-08-01)

Bug Fixes

  • resolver: directory import nested ".." (2fada74)

This release is also available on:

v4.16.4

4.16.4 (2024-08-01)

Bug Fixes

  • resolver: handle importing ".." (3cf0b6a), closes #626

This release is also available on:

v4.16.3

4.16.3 (2024-07-31)

Bug Fixes

This release is also available on:

v4.16.2

4.16.2 (2024-07-03)

Bug Fixes

... (truncated)

Commits
  • 2fada74 fix(resolver): directory import nested ".."
  • 3cf0b6a fix(resolver): handle importing ".."
  • ca4bf11 refactor(cjs): resolver organized in multiple files
  • 3df00f4 fix(resolver): prioritize requested path in dependencies
  • 1c3fd22 docs(usages): update link to knip usage (#622)
  • 8344163 chore(deps): update dependency node to v20.16.0 (#621)
  • 178f338 chore: remove unused eslintConfig (#620)
  • 1affdd0 docs: make logos easier to see
  • 7d38e42 docs: fix marquee bug on safari
  • e5ddeb3 docs: fix marquee on safari
  • Additional commits viewable in compare view

Updates @biomejs/biome from 1.8.2 to 1.8.3

Release notes

Sourced from @​biomejs/biome's releases.

CLI v1.8.3

CLI

Bug fixes

  • Fix #3104 by suppressing node warnings when using biome migrate. Contributed by @​SuperchupuDev

  • Force colors to be off when using the GitHub reporter to properly create annotations in GitHub actions (#3148). Contributed by @​Sec-ant

Parser

Bug fixes

Formatter

Bug fixes

Linter

New features

Bug fixes

  • useConsistentArrayType and useShorthandArrayType now ignore Array in the extends and implements clauses. Fix #3247. Contributed by @​Conaclos
  • Fixes #3066 by taking into account the dependencies declared in the package.json. Contributed by @​ematipico
  • The code action of the useArrowFunction rule now preserves a trailing comma when there is only a single type parameter in the arrow function and JSX is enabled. Fixes #3292. Contributed by @​Sec-ant

Enhancements

  • Enhance tailwind sorting lint rule #1274 with variant support.

    Every preconfigured variant is assigned a weight that concurs on establishing the output sorting order. Since nesting variants on the same utility class is possible, the resulting weight is the Bitwise XOR of all the variants weight for that class. Dynamic variants (e.g. has-[.custom-class], group-[:checked]) are also supported and they take the weight of their base variant name the custom value attached (e.g. has-[.custom-class] takes has weight). Arbitrary variants (e.g. [&nth-child(2)]) don't have a weight assigned and they are placed after every known variant. Classes with the same amount of arbitrary variants follow lexicographical order. The class that has the highest number of nested arbitrary variants is placed last. Screen variants (e.g. sm:, max-md:, min-lg:) are not supported yet.

    Contributed by @​lutaok

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

v1.8.3 (2024-06-27)

CLI

Bug fixes

  • Fix #3104 by suppressing node warnings when using biome migrate. Contributed by @​SuperchupuDev

  • Force colors to be off when using the GitHub reporter to properly create annotations in GitHub actions (#3148). Contributed by @​Sec-ant

Parser

Bug fixes

Formatter

Bug fixes

Linter

New features

Enhancements

Bug fixes

  • useConsistentArrayType and useShorthandArrayType now ignore Array in the extends and implements clauses. Fix #3247. Contributed by @​Conaclos
  • Fixes #3066 by taking into account the dependencies declared in the package.json. Contributed by @​ematipico
  • The code action of the useArrowFunction rule now preserves a trailing comma when there is only a single type parameter in the arrow function and JSX is enabled. Fixes #3292. Contributed by @​Sec-ant

Enhancements

  • Enhance tailwind sorting lint rule #1274 with variant support.

    Every preconfigured variant is assigned a weight that concurs on establishing the output sorting order. Since nesting variants on the same utility class is possible, the resulting weight is the Bitwise XOR of all the variants weight for that class. Dynamic variants (e.g. has-[.custom-class], group-[:checked]) are also supported and they take the weight of their base variant name the custom value attached (e.g. has-[.custom-class] takes has weight). Arbitrary variants (e.g. [&nth-child(2)]) don't have a weight assigned and they are placed after every known variant. Classes with the same amount of arbitrary variants follow lexicographical order. The class that has the highest number of nested arbitrary variants is placed last. Screen variants (e.g. sm:, max-md:, min-lg:) are not supported yet.

... (truncated)

Commits

Updates @cloudflare/workers-types from 4.20240620.0 to 4.20240729.0

Commits

Updates drizzle-kit from 0.22.7 to 0.23.1

Release notes

Sourced from drizzle-kit's releases.

0.23.1

  • Fixed an issue with pushing SQLite tables with foreign keys defined using custom names. Previously, such tables were always recreated on each push. In this release, the foreign key name will not affect the detection of differences between the code schema and the database schema. This is because SQLite cannot have foreign key constraint names specified in a DDL create table query, so they should not be used in the diff process

  • When dropping a column from an SQLite table, there was an issue with accessing the primary key of an undefined column

  • Fixed issues with sequences, #504, #2643

v0.23.0

🎉 New flag --force for drizzle-kit push

You can auto-accept all data-loss statements using the push command. It's only available in CLI parameters. Make sure you always use it if you are fine with running data-loss statements on your database

🎉 New migrations flag prefix

You can now customize migration file prefixes to make the format suitable for your migration tools:

  • index is the default type and will result in 0001_name.sql file names;
  • supabase and timestamp are equal and will result in 20240627123900_name.sql file names;
  • unix will result in unix seconds prefixes 1719481298_name.sql file names;
  • none will omit the prefix completely;
Example: Supabase migrations format
import { defineConfig } from "drizzle-kit";
export default defineConfig({
  dialect: "postgresql",
  migrations: {
    prefix: 'supabase'
  }
});

🎉 Migrations support for PostgreSQL Sequences

You can now specify sequences in Postgres within any schema you need and define all the available properties

Example
import { pgSchema, pgSequence } from "drizzle-orm/pg-core";

// No params specified

export const customSequence = pgSequence("name");


// Sequence with params

export const customSequence = pgSequence("name", {

startWith: 100,

maxValue: 10000,

minValue: 100,

</tr></table>

... (truncated)

Commits

Updates typescript from 5.5.2 to 5.5.4

Release notes

Sourced from typescript's releases.

TypeScript 5.5.4

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.5.3

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

Commits
  • c8a7d58 Bump version to 5.5.4 and LKG
  • c0ded04 🤖 Pick PR #58771 (Allow references to the global Symb...) into release-5.5 (#...
  • 5ba41e2 🤖 Pick PR #59208 (Write non-missing undefined on mapp...) into release-5.5 (#...
  • b075332 🤖 Pick PR #59337 (Allow declarationMap to be emitted ...) into release-5.5 (#...
  • 9dd6f91 Cherry-pick "Stop using latest Node in CI" to release-5.5 (#59348)
  • bf0ddaf 🤖 Pick PR #59070 (Delay the calculation of common sou...) into release-5.5 (#...
  • a44e2d9 🤖 Pick PR #59160 (Fixed crash on authored import type...) into release-5.5 (#...
  • f35206d 🤖 Pick PR #59325 (Don't skip markLinkedReferences on ...) into release-5.5 (#...
  • 1109550 Fix baselines on release-5.5 (#59330)
  • 8794318 🤖 Pick PR #59215 (Fix codefix crash on circular alias...) into release-5.5 (#...
  • Additional commits viewable in compare view

Updates wrangler from 3.61.0 to 3.68.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

Patch Changes

  • #6379 31aa15c Thanks @​RamIdeas! - fix: clearer error message when trying to use Workers Sites or Legacy Assets with wrangler versions upload

  • #6367 7588800 Thanks @​RamIdeas! - fix: implicitly cleanup (call stop()) in unstable_dev if the returned Promise rejected and the stop() function was not returned

  • #6330 cfbdede Thanks @​RamIdeas! - fix: when the worker's request.url is overridden using the host or localUpstream, ensure port is overridden/cleared too

    When using --localUpstream=example.com, the request.url would incorrectly be "example.com:8787" but is now "example.com".

    This only applies to wrangler dev --x-dev-env and unstable_dev({ experimental: { devEnv: true } }).

  • #6365 13549c3 Thanks @​WalshyDev! - fix: WASM modules meant that wrangler versions secret ... could not properly update the version. This has now been fixed.

  • Updated dependencies [a9021aa, 44ad2c7]:

[email protected]

Patch Changes

  • #6312 67c611a Thanks @​emily-shen! - feat: add CLI flag and config key for experimental Workers + Assets

    This change adds a new experimental CLI flag (--experimental-assets) and configuration key (experimental_assets) for the new Workers + Assets work.

    The new flag and configuration key are for the time being "inactive", in the sense that no behaviour is attached to them yet. This will follow up in future work.

  • Updated dependencies [b3c3cb8]:

[email protected]

Minor Changes

  • #4545 e5afae0 Thanks @​G4brym! - Remove experimental/beta constellation commands and binding, please migrate to Workers AI, learn more here https://developers.cloudflare.com/workers-ai/. This is not deemed a major version bump for Wrangler since these commands were never generally available.

  • #6322 373248e Thanks @​IRCody! - Add cloudchamber scope to existing scopes instead of replacing them.

    When using any cloudchamber command the cloudchamber scope will now be added to the existing scopes instead of replacing them.

  • #6276 a432a13 Thanks @​CarmenPopoviciu! - feat: Add support for wrangler.jsonc

    This commit adds support for wrangler.jsonc config file for Workers. This feature is available behind the --experimental-json-config flag (just like wrangler.json).

... (truncated)

Changelog

Sourced from wrangler's changelog.

3.68.0

Minor Changes

Patch Changes

  • #6379 31aa15c Thanks @​RamIdeas! - fix: clearer error message when trying to use Workers Sites or Legacy Assets with wrangler versions upload

  • #6367 7588800 Thanks @​RamIdeas! - fix: implicitly cleanup (call stop()) in unstable_dev if the returned Promise rejected and the stop() function was not returned

  • #6330 cfbdede Thanks @​RamIdeas! - fix: when the worker's request.url is overridden using the host or localUpstream, ensure port is overridden/cleared too

    When using --localUpstream=example.com, the request.url would incorrectly be "example.com:8787" but is now "example.com".

    This only applies to wrangler dev --x-dev-env and unstable_dev({ experimental: { devEnv: true } }).

  • #6365 13549c3 Thanks @​WalshyDev! - fix: WASM modules meant that wrangler versions secret ... could not properly update the version. This has now been fixed.

  • Updated dependencies [a9021aa, 44ad2c7]:

3.67.1

Patch Changes

  • #6312 67c611a Thanks @​emily-shen! - feat: add CLI flag and config key for experimental Workers + Assets

    This change adds a new experimental CLI flag (--experimental-assets) and configuration key (experimental_assets) for the new Workers + Assets work.

    The new flag and configuration key are for the time being "inactive", in the sense that no behaviour is attached to them yet. This will follow up in future work.

  • Updated dependencies [b3c3cb8]:

3.67.0

Minor Changes

  • #4545 e5afae0 Thanks @​G4brym! - Remove experimental/beta constellation commands and binding, please migrate to Workers AI, learn more here https://developers.cloudflare.com/workers-ai/. This is not deemed a major version bump for Wrangler since these commands were never generally available.

  • #6322 373248e Thanks @​IRCody! - Add cloudchamber scope to existing scopes instead of replacing them.

    When using any cloudchamber command the cloudchamber scope will now be added to the existing scopes instead of replacing them.

  • #6276 a432a13 Thanks @​CarmenPopoviciu! - feat: Add support for wrangler.jsonc

... (truncated)

Commits
  • 5146775 Version Packages (#6358)
  • 9f02173 Update Workers Sites/Legacy Assets error message in versions commands (#6390)
  • 31aa15c Clearer error message when trying to use Workers Sites with `wrangler version...
  • 13549c3 Fix WASM modules in versions secrets (#6365)
  • a9021aa chore(deps): bump the workerd-and-workers-types group across 1 directory with...
  • 7588800 try improve fixture flakiness due to unstable_dev (#6367)
  • 64f34e8 Support --x-dev-env for Pages (#6097)
  • dc576c8 Log worker script startup time (#6318)
  • cfbdede Add --x-dev-env to fixtures tests (#6330)
  • 6e14865 fix(wrangler): Rename more legacy-assets things (#6336)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • `@dependabot unignore ...

Description has been truncated

dependabot[bot] avatar Aug 05 '24 03:08 dependabot[bot]