Bump the npm_and_yarn group across 1 directory with 8 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `13.0.0` | `14.2.10` | | [sharp](https://github.com/lovell/sharp) | `0.31.2` | `0.32.6` | | [axios](https://github.com/axios/axios) | `0.26.1` | `removed` | | [openai](https://github.com/openai/openai-node) | `3.1.0` | `4.73.0` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [semver](https://github.com/npm/node-semver) | `6.3.0` | `7.6.3` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | Updates `next` from 13.0.0 to 14.2.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v13.0.0...v14.2.10) Updates `sharp` from 0.31.2 to 0.32.6 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.31.2...v0.32.6) Updates `postcss` from 8.4.19 to 8.4.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.19...8.4.31) Removes `axios` Updates `openai` from 3.1.0 to 4.73.0 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md) - [Commits](openai/openai-node@v3.1.0...v4.73.0) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `semver` from 6.3.0 to 7.6.3 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v7.6.3) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: next dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sharp dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: axios dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: openai dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
dependencies
|
Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information |
codeant-ai
bot
added
the
size:XL
Things to consider 🐛
|
![codeant-ai[bot]](https://avatars.githubusercontent.com/in/646884?s=60&v=4){kind=small}
| "lru-cache": "^7.14.1", | ||
| "next": "13.0.0", | ||
| "openai": "^3.1.0", | ||
| "next": "14.2.10", |
There was a problem hiding this comment.
Suggestion: Verify compatibility of the updated "next" version with other dependencies and the existing codebase to prevent potential integration issues. [compatibility]
Suggested change
| "next": "14.2.10", |
| "next": "13.0.0", | ||
| "openai": "^3.1.0", | ||
| "next": "14.2.10", | ||
| "openai": "^4.73.0", |
There was a problem hiding this comment.
Suggestion: Check if the new version of "openai" introduces any breaking changes or requires code adjustments. [compatibility]
Suggested change
| "openai": "^4.73.0", |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
User description
Bumps the npm_and_yarn group with 7 updates in the / directory:
13.0.014.2.100.31.20.32.60.26.1removed3.1.04.73.03.0.23.0.36.3.07.6.31.0.11.0.2Updates
nextfrom 13.0.0 to 14.2.10Commits
937651fv14.2.107ed7f12Remove invalid fallback revalidate value (#69990)99de057Revert server action optimization (#69925)24647b9Add ability to customize Cache-Control (#69802)6fa8982v14.2.97998745test: lock ts type check (#69889)4bd3849create-next-app: fix font file corruption when using import alias (#69806)3756801test: check most possible combination of CNA flags9a72ad6unpin CNA tests from 14.2.3747d365Fix metadata prop merging (#69807)Updates
sharpfrom 0.31.2 to 0.32.6Changelog
Sourced from sharp's changelog.
... (truncated)
Commits
eefaa99Release v0.32.6dbce6faUpgrade to libvips v8.14.5af0fcb3Docs: changelog for #3799c6f54e5Bump devDeps846563eTypeScript: add definitions for block and unblock (#3799)9c217abEnsure withMetadata can add RGB16 profiles #3773e7381e5Alternative fix for 4340d60, uses existing StaySequential4340d60Ensure composite tile images fully decoded #37677f64d46Docs: add missing returns property to raw67e927bDocs: ensure all functions include method signature #3777Updates
postcssfrom 8.4.19 to 8.4.31Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
90208deRelease 8.4.31 version58cc860Fix carrier return parsing4fff8e4Improve pnpm test outputcd43ed1Update dependenciescaa916bUpdate dependencies8972f76Typo11a5286Typo45c5501Release 8.4.30 versionbc3c341Update linterb2be58aMerge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...Removes
axiosUpdates
openaifrom 3.1.0 to 4.73.0Release notes
Sourced from openai's releases.
... (truncated)
Changelog
Sourced from openai's changelog.
... (truncated)
Commits
6c25833Merge pull request #1189 from openai/release-please--branches--master--change...1e9391brelease: 4.73.00feeafdfeat(api): add gpt-4o-2024-11-20 model (#1201)3968ef1docs(readme): fix incorrect fileBatches.uploadAndPoll params (#1200)e34981cdocs: change readme title (#1198)ebdb4f7docs: improve jsr documentation (#1197)6961c37feat: bump model in all example snippets to gpt-4o12f9334chore(internal): spec update (#1195)8ee6c03chore(client): drop unused devDependency (#1191)524b9e8fix(docs): add missing await to pagination example (#1190)Maintainer changes
This version was pushed to npm by dschnurr-openai, a new releaser for openai since your current version.
Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
semverfrom 6.3.0 to 7.6.3Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
0a12d6cchore: release 7.6.3 (#720)73a3d79fix: optimize Range parsing and formatting (#726)2975ecedocs: fix extra backtick typo (#719)eb1380bchore: release 7.6.2 (#714)6466ba9fix(lru): use map.delete() directly (#713)d777418chore: release 7.6.1 (#706)988a8dedeps: uninstalllru-cache(#709)5feeb7fchore: postinstall for dependabot template-oss PRdd09b60chore: bump@npmcli/template-ossto 4.22.0c570a34fix(linting): no-unused-varsMaintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
json5from 1.0.1 to 1.0.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
... (truncated)
Commits
a62db1e1.0.2e0c23fedocs: update CHANGELOG for v1.0.262a6540fix: add proto to objects and arraysDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Description
nextpackage from version 13.0.0 to 14.2.10 to include the latest features and fixes.openaipackage from version 3.1.0 to 4.73.0 for improved functionality.sharppackage from version 0.31.2 to 0.32.6 for better performance and bug fixes.Changes walkthrough
package.json
Update package dependencies in package.jsonpackage.json
nextpackage from version 13.0.0 to 14.2.10.openaipackage from version 3.1.0 to 4.73.0.sharppackage from version 0.31.2 to 0.32.6.💡 Usage Guide
Checking Your Pull Request
Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.
Talking to CodeAnt AI
Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:
This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.
Retrigger review
Ask CodeAnt AI to review the PR again, by typing:
Check Your Repository Health
To analyze the health of your code repository, visit our dashboard at app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.