Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency astro to v4.16.16 #358

Merged
merged 136 commits into from
Nov 30, 2024
Merged

Update dependency astro to v4.16.16 #358

merged 136 commits into from
Nov 30, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 26, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
astro (source) 4.16.14 -> 4.16.15 age adoption passing confidence

Release Notes

withastro/astro (astro)

v4.16.15

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Alex-Toucan and others added 30 commits August 26, 2024 07:59
* Update Astro from v4.14.4 to v4.14.5. (#253)

* Update `actions/checkout` from v3 to v4.  (#255)

* Update Astro from v4.14.4 to v4.14.5. (Beta)

* Update `actions/checkout` from v3 to v4.

This is to get rid of any deprecation warning from CodeQL.

* Update `micromatch` from v4.0.7 to v4.0.8. (#257)

* Update Astro from v4.14.4 to v4.14.5. (Beta)

* Update actions/checkout from v3 to v4. (Up to date with #255)

* Update `micromatch` from v4.0.7 to v4.0.8.

* Add renovate.json (#258)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Update version.js

* Update package.json

* Update package-lock.json

* Update README.md

* Update archive.astro
…#316)

* Rename success.astro to success.astro

* Update and rename index.astro to index.astro

* Update index.astro

* Update paid.astro

* Update Footer.astro

* Update privacy.astro
* Update licenses to include highlight.js and dracula themes

* Update stories to have a professional layout

* Update index.astro

* Update component to include more customize options

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* final fix for tonight

* final final fix

* final final fix

* final final fix

* Add story.

* Commit 2 of story

* Commit 3 of story

* Update Navbar.astro

* Update div.astro

* Update cctv.astro

* Commit 4 of story

* Commit 5 of story

* Commit 6 of story

* Update cctv.astro

* Update Navbar.astro

* Commit 7 of story

* Commit 8 of story

* Commit 9 of story

* Commit 9 of story

* Update cctv.astro

* Update Navbar.astro

* Update Navbar.astro

* Update Navbar.astro

* Update Navbar.astro

* Update cctv.astro

* Update div.astro

* Update cctv.astro

* Update Navbar.astro

* Update Navbar.astro

* Update Navbar.astro

* Update Navbar.astro

* Update div.astro

* Update other.css

* Update div.astro

* Update div.astro

* Update index.astro

* Update Navbar.astro

* Update index.astro
Alex-Toucan and others added 10 commits November 23, 2024 20:52
* Update security policy.

* Update version.
* Update security policy.

* Update version.

* Remove additional programming languages for PSON.

* Rewording.
* Add NyaOS.

* Add word.

* Add MORE words.

* Reword.

* Reword.

* Add system requirements.

* Add system requirements.

* Fix system requirements.

* Rename section.
* Add story 'Sci-Fi Stories Become Reality'

* Fix spacing.

* Add files via upload

* Update scifi.astro
Copy link

github-actions bot commented Nov 26, 2024

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

package.json

PackageVersionLicenseIssue Type
astro^4.16.16NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@shikijs/core 1.24.0 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/@shikijs/engine-javascript 1.24.0 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/@shikijs/engine-oniguruma 1.24.0 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/@shikijs/types 1.24.0 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/astro 4.16.16 UnknownUnknown
npm/ci-info 4.1.0 🟢 4.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1015 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/emoji-regex-xs 1.0.0 UnknownUnknown
npm/magic-string 0.30.14 🟢 4.1
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Maintained🟢 78 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 64 existing vulnerabilities detected
npm/oniguruma-to-es 0.7.0 UnknownUnknown
npm/regex 5.0.2 UnknownUnknown
npm/regex-recursion 4.3.0 UnknownUnknown
npm/regex-utilities 2.3.0 UnknownUnknown
npm/shiki 1.24.0 🟢 4.7
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/vite 5.4.11 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 9Found 27/28 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 7binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/vitefu 1.0.4 UnknownUnknown
npm/xxhash-wasm 1.1.0 🟢 4.3
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 9binaries present in source code
Code-Review⚠️ 1Found 3/27 approved changesets -- score normalized to 1
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 73 existing vulnerabilities detected
npm/astro ^4.16.16 UnknownUnknown

Scanned Files

  • package-lock.json
  • package.json

Copy link

netlify bot commented Nov 26, 2024

Deploy Preview for atproducts ready!

Name Link
🔨 Latest commit 7f3cd00
🔍 Latest deploy log https://app.netlify.com/sites/atproducts/deploys/674a7041a038fc00083fedc0
😎 Deploy Preview https://deploy-preview-358--atproducts.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 84
Accessibility: 92
Best Practices: 83
SEO: 91
PWA: 80
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link
Contributor Author

renovate bot commented Nov 26, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@Alex-Toucan Alex-Toucan self-assigned this Nov 26, 2024
@Alex-Toucan Alex-Toucan added the dependencies Pull requests that update a dependency file label Nov 26, 2024
@Alex-Toucan Alex-Toucan added this to the 2.20.2 milestone Nov 26, 2024
@Alex-Toucan Alex-Toucan changed the title Update dependency astro to v4.16.15 Update dependency astro to v4.16.16 Nov 30, 2024
@Alex-Toucan Alex-Toucan merged commit 2734812 into main Nov 30, 2024
9 checks passed
@Alex-Toucan Alex-Toucan deleted the renovate/astro-monorepo branch December 2, 2024 23:06
@Alex-Toucan Alex-Toucan restored the renovate/astro-monorepo branch December 3, 2024 22:44
@Alex-Toucan Alex-Toucan deleted the renovate/astro-monorepo branch December 3, 2024 22:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant