Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix some of the easier to fix dependabot alerts #284

Merged
merged 1 commit into from
Dec 18, 2024
Merged

Conversation

dinmukhamedm
Copy link
Member

@dinmukhamedm dinmukhamedm commented Dec 18, 2024

Upgrades nanoid and hopefully dismisses next js alert


Important

Update dependencies in frontend/package.json to address dependabot alerts, including @aws-sdk/client-s3, @supabase/supabase-js, and typescript.

  • Dependencies Updated:
    • Updated @aws-sdk/client-s3 to ^3.715.0.
    • Updated @clickhouse/client to ^1.10.0.
    • Updated @radix-ui/react-accordion to ^1.2.2 and other @radix-ui packages.
    • Updated @supabase/supabase-js to ^2.47.9.
    • Updated dotenv to ^16.4.7.
    • Updated framer-motion to ^11.15.0.
    • Updated posthog-js to ^1.202.2 and posthog-node to ^4.3.2.
    • Updated typescript to ^5.7.2.
    • Updated prettier to ^3.4.2.
    • Updated eslint-plugin-promise to ^7.2.1.

This description was created by Ellipsis for b53f498. It will automatically update as commits are pushed.

Copy link
Contributor

@ellipsis-dev ellipsis-dev bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Looks good to me! Reviewed everything up to b53f498 in 10 seconds

More details
  • Looked at 198 lines of code in 1 files
  • Skipped 1 files when reviewing.
  • Skipped posting 1 drafted comments based on config settings.
1. frontend/package.json:75
  • Draft comment:
    Consider using a caret (^) to allow minor version updates for next and next-auth to ensure you receive future patches and minor updates.
  • Reason this comment was not posted:
    Confidence changes required: 50%
    The PR updates dependencies to address dependabot alerts. However, the next and next-auth packages are pinned to specific versions, which might not address potential security vulnerabilities or bugs in future releases. It's generally a good practice to allow for minor version updates unless there's a specific reason to pin them.

Workflow ID: wflow_t9Gj4oVSa7HrdJqS


You can customize Ellipsis with 👍 / 👎 feedback, review rules, user-specific overrides, quiet mode, and more.

@dinmukhamedm dinmukhamedm merged commit e53f682 into dev Dec 18, 2024
2 checks passed
@dinmukhamedm dinmukhamedm deleted the chore/dependabot branch December 18, 2024 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant