kleros-v2
kleros-v2 copied to clipboard
chore(deps): update all non-major dependencies
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
|---|---|---|---|---|---|---|---|
| @graphprotocol/graph-cli | 0.64.1 -> 0.87.0 |
devDependencies | minor | ||||
| @graphprotocol/graph-ts | ^0.32.0 -> ^0.35.0 |
dependencies | minor | ||||
| @logtail/pino (source) | ^0.4.22 -> ^0.5.0 |
devDependencies | minor | ||||
| @types/react (source) | 18.2.0 -> 18.3.12 |
devDependencies | minor | ||||
| @yornaath/batshit | ^0.9.0 -> ^0.10.0 |
dependencies | minor | ||||
| actions/checkout | v3.5.3 -> v3.6.0 |
action | minor | ||||
| actions/checkout | v3.5.2 -> v3.6.0 |
action | minor | ||||
| actions/dependency-review-action | v3.0.8 -> v3.1.5 |
action | minor | ||||
| actions/setup-node | v3.8.1 -> v3.8.2 |
action | patch | ||||
| actions/upload-artifact | v3.1.2 -> v3.2.1 |
action | minor | ||||
| dependabot/fetch-metadata | v1.6.0 -> v1.7.0 |
action | minor | ||||
| getsentry/action-release | v1.4.1 -> v1.7.0 |
action | minor | ||||
| github/codeql-action | v2.22.0 -> v2.27.0 |
action | minor | ||||
| hardhat (source) | 2.15.0 -> 2.22.15 |
devDependencies | minor | ||||
| hardhat-deploy | 0.11.42 -> 0.14.0 |
devDependencies | minor | ||||
| hardhat-deploy-ethers | 0.4.0-next.1 -> 0.4.2 |
devDependencies | patch | ||||
| ipfs/go-ipfs | v0.22.0 -> v0.31.0 |
minor | |||||
| next (source) | 14.2.14 -> 14.2.16 |
dependencies | patch | ||||
| node (source) | 20.11.0 -> 20.18.0 |
volta | minor | ||||
| node (source) | 18.19.0 -> 18.20.4 |
volta | minor | ||||
| ossf/scorecard-action | v2.3.0 -> v2.4.0 |
action | minor | ||||
| solidity-coverage | 0.8.2 -> 0.8.13 |
devDependencies | patch | ||||
| step-security/harden-runner | v2.5.0 -> v2.10.1 |
action | minor | ||||
| step-security/harden-runner | v2.6.0 -> v2.10.1 |
action | minor | ||||
| vanilla-jsoneditor | ^0.21.4 -> ^0.23.0 |
dependencies | minor | ||||
| vite-plugin-node-polyfills | ^0.21.0 -> ^0.22.0 |
devDependencies | minor | ||||
| yarn (source) | 4.0.2+sha256.825003a0f561ad09a3b1ac4a3b3ea6207af2796d54f62a9420520915721f5186 -> 4.5.1 |
packageManager | minor |
Release Notes
logtail/logtail-js (@logtail/pino)
v0.5.2
What's Changed
- [pino] Omit misleading context when executed in thread-stream worker by @PetrHeinz in https://github.com/logtail/logtail-js/pull/127
Full Changelog: https://github.com/logtail/logtail-js/compare/v0.5.1...v0.5.2
v0.5.0
What's Changed
- [tools] throttle.test.ts: Introduce 0.2ms tolerance by @PetrHeinz in https://github.com/logtail/logtail-js/pull/119
- Modernize Dependencies by @versecafe in https://github.com/logtail/logtail-js/pull/116
New Contributors
- @versecafe made their first contribution in https://github.com/logtail/logtail-js/pull/116
Full Changelog: https://github.com/logtail/logtail-js/compare/v0.4.23...v0.5.0
actions/checkout (actions/checkout)
v3.6.0
actions/dependency-review-action (actions/dependency-review-action)
v3.1.5: 3.1.5
What's Changed
- Smaller
per_pagewhen requesting diff by @hmaurer in https://github.com/actions/dependency-review-action/pull/649 - Update dependencies:
- Bump @typescript-eslint/parser from 6.10.0 to 6.13.1 by @dependabot in https://github.com/actions/dependency-review-action/pull/630
- Bump prettier from 3.0.3 to 3.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/629
- Bump @types/jest from 29.5.8 to 29.5.11 by @dependabot in https://github.com/actions/dependency-review-action/pull/637
- Bump nodemon from 3.0.1 to 3.0.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/636
- Replace pip -> pypi in PURL examples by @febuiles in https://github.com/actions/dependency-review-action/pull/638
- Bump @typescript-eslint/eslint-plugin from 6.12.0 to 6.15.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/644
- Bump eslint from 8.53.0 to 8.56.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/640
- Bump @typescript-eslint/parser from 6.13.1 to 6.16.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/645
- Bump prettier from 3.1.0 to 3.1.1 by @dependabot in https://github.com/actions/dependency-review-action/pull/646
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3.1.4...v3.1.5
v3.1.4: 3.1.4
What's Changed
-
Fixed a bug with severity filtering when using the
allow_ghsasoption: https://github.com/actions/dependency-review-action/pull/623. -
Updates dependencies:
- Bump @types/node from 16.18.61 to 16.18.62 by @dependabot in https://github.com/actions/dependency-review-action/pull/619 action/pull/620
- Bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/625
- Bump typescript from 5.2.2 to 5.3.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/624
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.1.4
v3.1.3: 3.1.3
What's Changed
- Fixes purl "version must be percent-encoded" by @theztefan in https://github.com/actions/dependency-review-action/pull/617
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.1.3
v3.1.2: 3.1.2
What's Changed
- Fix a regression for setups using self-hosted runners behind HTTP proxies:@febuiles in https://github.com/actions/dependency-review-action/pull/611
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.1.2
v3.1.1: 3.1.1
What's Changed
- Update a bunch of dependencies, including major version upgrades for
octokit,@actions/githubandtypescript.
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3.1.0...v3.1.1
v3.1.0: 3.1.0
What's New
Added support for dependencies submitted through the dependency submission API. This includes two new configuration parameters: retry-on-snapshot-warnings and retry-on-snapshot-warnings-timeout.
What's Changed
- Fix(docs): Correct action input name by @oerd in https://github.com/actions/dependency-review-action/pull/551
New Contributors
- @oerd made their first contribution in https://github.com/actions/dependency-review-action/pull/551
Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.1.0
actions/setup-node (actions/setup-node)
v3.8.2
What's Changed
- Update semver by @dmitry-shibanov in https://github.com/actions/setup-node/pull/861
- Update temp directory creation by @nikolai-laevskii in https://github.com/actions/setup-node/pull/859
- Bump @babel/traverse from 7.15.4 to 7.23.2 by @dependabot in https://github.com/actions/setup-node/pull/870
- Add notice about binaries not being updated yet by @nikolai-laevskii in https://github.com/actions/setup-node/pull/872
- Update toolkit cache and core by @dmitry-shibanov and @seongwon-privatenote in https://github.com/actions/setup-node/pull/875
Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.2
actions/upload-artifact (actions/upload-artifact)
v3.2.1
What's Changed
This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0
- Ensure hidden files input is used by @joshmgross in https://github.com/actions/upload-artifact/pull/609
Full Changelog: https://github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1
v3.2.0
Notice: Breaking Changes :warning:
We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.
See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.
What's Changed
- V3 backport: Exclude hidden files by default by @SrRyan in https://github.com/actions/upload-artifact/pull/604
Full Changelog: https://github.com/actions/upload-artifact/compare/v3.1.3...v3.2.0
v3.1.3
What's Changed
- chore(github): remove trailing whitespaces by @ljmf00 in https://github.com/actions/upload-artifact/pull/313
- Bump @actions/artifact version to v1.1.2 by @bethanyj28 in https://github.com/actions/upload-artifact/pull/436
Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v3.1.3
dependabot/fetch-metadata (dependabot/fetch-metadata)
v1.7.0
What's Changed
- Bump dotenv from 16.0.3 to 16.3.1 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/404
- Bump @types/node from 20.2.3 to 20.3.3 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/407
- Bump the eslint-dependencies group with 4 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/409
- Update dependabot.yml by @bdragon in https://github.com/dependabot/fetch-metadata/pull/410
- Bump @types/node from 20.3.3 to 20.4.0 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/411
- Bump yaml from 2.2.1 to 2.3.1 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/390
- Bump tough-cookie from 4.0.0 to 4.1.3 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/412
- Bump @types/node from 20.4.0 to 20.4.1 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/413
- Generate Dependabot PRs on Sundays weekly by @abdulapopoola in https://github.com/dependabot/fetch-metadata/pull/417
- Aggressively group prod and dev dependencies for NPM by @abdulapopoola in https://github.com/dependabot/fetch-metadata/pull/420
- Update .nvmrc to latest node 16 LTS version by @abdulapopoola in https://github.com/dependabot/fetch-metadata/pull/422
- Bump the dev-dependencies group with 9 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/421
- Bump the dev-dependencies group with 1 update by @dependabot in https://github.com/dependabot/fetch-metadata/pull/423
- Check for uncommitted files beyond the
diffdirectory by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/278 - Bump the dev-dependencies group with 6 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/424
- Bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/425
- Bump the dev-dependencies group with 6 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/428
- Bump the dev-dependencies group with 7 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/429
- Bump tibdex/github-app-token from 1.8.0 to 1.8.2 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/430
- Bump the dev-dependencies group with 4 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/432
- Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/436
- Bump the dev-dependencies group with 6 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/440
- Change actions/checkout@v3 to v4 in readme by @Nishnha in https://github.com/dependabot/fetch-metadata/pull/444
- Bump the dev-dependencies group with 4 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/445
- Bump @vercel/ncc from 0.36.1 to 0.38.0 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/435
- Bump the dev-dependencies group with 4 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/447
- Bump the dev-dependencies group with 3 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/448
- Bump @babel/traverse from 7.22.8 to 7.23.2 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/457
- Add blurbs about using a PAT to the readme by @Nishnha in https://github.com/dependabot/fetch-metadata/pull/466
- Bump @vercel/ncc from 0.38.0 to 0.38.1 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/462
- Bump actions/setup-node from 3 to 4 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/461
- Bump the dev-dependencies group with 13 updates by @dependabot in https://github.com/dependabot/fetch-metadata/pull/497
- Bump tibdex/github-app-token from 1.8.2 to 2.1.0 by @dependabot in https://github.com/dependabot/fetch-metadata/pull/442
- Scope app token to only this repo for security by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/501
- Switch to the official action for managing app tokens by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/504
- v1.7.0 by @fetch-metadata-action-automation in https://github.com/dependabot/fetch-metadata/pull/505
New Contributors
- @bdragon made their first contribution in https://github.com/dependabot/fetch-metadata/pull/410
- @abdulapopoola made their first contribution in https://github.com/dependabot/fetch-metadata/pull/417
Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v1.6.0...v1.7.0
getsentry/action-release (getsentry/action-release)
v1.7.0
- Updates Sentry CLI to the latest 2.24.1 version
v1.6.0
Reverts the PR attempting to update the CLI to v2.x
v1.5.0
github/codeql-action (github/codeql-action)
v2.27.0
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.
2.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarifAction would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarifAction. #2557 - Update default CodeQL bundle version to 2.19.2. #2552
See the full CHANGELOG.md for more information.
v2.26.13
v2.26.12
v2.26.11
v2.26.10
v2.26.9
v2.26.8
v2.26.7
v2.26.6
v2.26.5
v2.26.4
v2.26.3
v2.26.2
v2.26.1
v2.26.0
v2.25.15
v2.25.14
v2.25.13
v2.25.12
v2.25.11
v2.25.10
v2.25.9
v2.25.8
v2.25.7
v2.25.6
v2.25.5
v2.25.4
v2.25.3
v2.25.2
v2.25.1
v2.25.0
v2.24.11
v2.24.10
v2.24.9
v2.24.8
v2.24.7
v2.24.6
v2.24.5
v2.24.4
v2.24.3
v2.24.2
v2.24.1
v2.24.0
v2.23.2
v2.23.1
v2.23.0
v2.22.12
v2.22.11
v2.22.10
v2.22.9
v2.22.8
v2.22.7
v2.22.6
v2.22.5
v2.22.4
Configuration
📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, check this box
This PR was generated by Mend Renovate. View the repository job log.
PR-Codex overview
This PR primarily focuses on updating package versions, specifically for yarn, node, and various dependencies across multiple configuration files, as well as enhancing GitHub Actions workflows for improved security and functionality.
Detailed summary
- Updated
nodeversion from20.11.0to20.18.0in multiplepackage.jsonfiles. - Upgraded
yarnversion to4.5.1with a new hash in severalpackage.jsonfiles. - Changed
ipfs/go-ipfsimage version fromv0.22.0tov0.31.0. - Updated
step-security/harden-runnerversion tov2.10.1in multiple workflow files. - Updated
dependabot/fetch-metadataversion tov1.7.0. - Changed
getsentry/action-releaseversion tov1.7.0. - Upgraded
actions/checkoutto version3.6.0in several workflows. - Updated
actions/setup-nodeto version3.8.2. - Updated various dependencies in
package.jsonfiles, including@graphprotocol/graph-cli,@types/react, and others. - Improved consistency and security in GitHub Actions workflows across the repository.
The following files were skipped due to too many changes:
yarn.lock
✨ Ask PR-Codex anything about this PR by commenting with
/codex {your question}
Deploy Preview for kleros-v2-testnet failed. Why did it fail? →
| Name | Link |
|---|---|
| Latest commit | 9c8573573b5fa798c5e4e03f42c867ef0d77ab73 |
| Latest deploy log | https://app.netlify.com/sites/kleros-v2-testnet/deploys/66db0ba937447800088cab77 |
Deploy Preview for kleros-v2-contracts ready!
| Name | Link |
|---|---|
| Latest commit | 00fdc0062c5865bd9b1c7619e901113f88ce9e4a |
| Latest deploy log | https://app.netlify.com/sites/kleros-v2-contracts/deploys/64f1c287fc2b300008d684b4 |
| Deploy Preview | https://deploy-preview-822--kleros-v2-contracts.netlify.app |
| Preview on mobile | Toggle QR Code...Use your smartphone camera to open QR code link. |
To edit notification comments on pull requests, go to your Netlify site configuration.
Deploy Preview for kleros-v2-university failed. Why did it fail? →
| Name | Link |
|---|---|
| Latest commit | 9c8573573b5fa798c5e4e03f42c867ef0d77ab73 |
| Latest deploy log | https://app.netlify.com/sites/kleros-v2-university/deploys/66db0ba9e4c2bb0008777a29 |
Deploy Preview for kleros-v2-university canceled.
| Name | Link |
|---|---|
| Latest commit | dd9a0b8e12701bb890bf0807953e4e45a0a5a771 |
| Latest deploy log | https://app.netlify.com/sites/kleros-v2-university/deploys/65d79ad3d7ba5a00086ad298 |
Deploy Preview for kleros-v2-neo failed. Why did it fail? →
| Name | Link |
|---|---|
| Latest commit | 9c8573573b5fa798c5e4e03f42c867ef0d77ab73 |
| Latest deploy log | https://app.netlify.com/sites/kleros-v2-neo/deploys/66db0ba95398680008e659db |
[!IMPORTANT]
Review skipped
Ignore keyword(s) in the title.
Ignored keywords (1)
- chore(deps):
Please check the settings in the CodeRabbit UI or the
.coderabbit.yamlfile in this repository. To trigger a single review, invoke the@coderabbitai reviewcommand.You can disable this status message by setting the
reviews.review_statustofalsein the CodeRabbit configuration file.
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
Tips
Chat
There are 3 ways to chat with CodeRabbit:
- Review comments: Directly reply to a review comment made by CodeRabbit. Example:
I pushed a fix in commit <commit_id>.Generate unit testing code for this file.Open a follow-up GitHub issue for this discussion.
- Files and specific lines of code (under the "Files changed" tab): Tag
@coderabbitaiin a new review comment at the desired location with your query. Examples:@coderabbitai generate unit testing code for this file.@coderabbitai modularize this function.
- PR comments: Tag
@coderabbitaiin a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:@coderabbitai generate interesting stats about this repository and render them as a table.@coderabbitai show all the console.log statements in this repository.@coderabbitai read src/utils.ts and generate unit testing code.@coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.@coderabbitai help me debug CodeRabbit configuration file.
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.
CodeRabbit Commands (Invoked using PR comments)
@coderabbitai pauseto pause the reviews on a PR.@coderabbitai resumeto resume the paused reviews.@coderabbitai reviewto trigger an incremental review. This is useful when automatic reviews are disabled for the repository.@coderabbitai full reviewto do a full review from scratch and review all the files again.@coderabbitai summaryto regenerate the summary of the PR.@coderabbitai resolveresolve all the CodeRabbit review comments.@coderabbitai configurationto show the current CodeRabbit configuration for the repository.@coderabbitai helpto get help.
Other keywords and placeholders
- Add
@coderabbitai ignoreanywhere in the PR description to prevent this PR from being reviewed. - Add
@coderabbitai summaryto generate the high-level summary at a specific location in the PR description. - Add
@coderabbitaior@coderabbitai titleanywhere in the PR title to generate the title automatically.
CodeRabbit Configuration File (.coderabbit.yaml)
- You can programmatically configure CodeRabbit by adding a
.coderabbit.yamlfile to the root of your repository. - Please see the configuration documentation for more information.
- If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation:
# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
Documentation and Community
- Visit our Documentation for detailed information on how to use CodeRabbit.
- Join our Discord Community to get help, request features, and share feedback.
- Follow us on X/Twitter for updates and announcements.
Code Climate has analyzed commit 9c857357 and detected 0 issues on this pull request.
View more on Code Climate.
Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code