horizon

horizon copied to clipboard

build(deps): bump tar from 6.1.15 to 6.2.1

1

Bumps [tar](https://github.com/isaacs/node-tar) from 6.1.15 to 6.2.1. Changelog Sourced from tar's changelog. Changelog 7.0 Rewrite in TypeScript, provide ESM and CommonJS hybrid interface Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry')...

dependabot[bot]

build(deps): bump undici from 5.23.0 to 5.28.4

1

Bumps [undici](https://github.com/nodejs/undici) from 5.23.0 to 5.28.4. Release notes Sourced from undici's releases. v5.28.4 :warning: Security Release :warning: Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 CVE-2024-30260 Fixes https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 CVE-2024-30261 Full Changelog: https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4 v5.28.3 ⚠️ Security Release...

dependabot[bot]

build(deps): bump express from 4.18.2 to 4.19.2

1

Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]

build(deps): bump jose from 4.14.4 to 4.15.5

1

Bumps [jose](https://github.com/panva/jose) from 4.14.4 to 4.15.5. Release notes Sourced from jose's releases. v4.15.5 Fixes add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176 v4.15.4 Fixes types: export GetKeyFunction (#592)...

dependabot[bot]

build(deps): bump ip from 2.0.0 to 2.0.1

1

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. Commits 3b0994a 2.0.1 32f468f lib: fixed CVE-2023-42282 and added unit test See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any...

dependabot[bot]

Welcome, I followed the guide in setting `.env` with the requirements but I got the following errors! ``` horizon git:(main) pnpm dev > @swell/[email protected] dev /Users/wpplumber/Workspace/Tools/Ecommerce/Swell/oss/horizon > yarn setup &&...

wpplumber

build(deps): bump next from 12.3.4 to 13.5.0

1

Bumps [next](https://github.com/vercel/next.js) from 12.3.4 to 13.5.0. Commits ffafad2 v13.5.0 4a589ed v13.4.20-canary.41 deb81cf fix styled-jsx alias (#55581) 1a9b0f6 improve internal error logging (#55582) 0631549 Fix react packages are not bundled for...

dependabot[bot]

build(deps): bump sharp from 0.31.3 to 0.32.6

1

Bumps [sharp](https://github.com/lovell/sharp) from 0.31.3 to 0.32.6. Changelog Sourced from sharp's changelog. v0.32.6 - 18th September 2023 Upgrade to libvips v8.14.5 for upstream bug fixes. Ensure composite tile images are fully...

dependabot[bot]

build(deps): bump @babel/traverse from 7.22.11 to 7.23.9

1

Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.22.11 to 7.23.9. Release notes Sourced from @​babel/traverse's releases. v7.23.9 (2024-01-25) :bug: Bug Fix babel-helper-transform-fixture-test-runner, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-preset-env #16225 fix: systemjs re-traverses helpers (@​liuxingbaoyu) babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators #16226...

dependabot[bot]

build(deps): bump @adobe/css-tools from 4.3.1 to 4.3.3

1

Bumps [@adobe/css-tools](https://github.com/adobe/css-tools) from 4.3.1 to 4.3.3. Changelog Sourced from @​adobe/css-tools's changelog. 4.3.3 / 2024-01-24 Update export property #271 4.3.2 / 2023-11-28 Fix redos vulnerability with specific crafted css string -...

dependabot[bot]