Skip to content

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 18 updates #467

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 18 updates #467

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 11, 2025 •
edited
Loading

Bumps the arcjet-apps-minor group with 18 updates in the / directory:

Package From To
@ai-sdk/openai 1.3.9 1.3.10
@astrojs/starlight 0.31.1 0.33.1
@astrojs/vercel 8.0.4 8.1.3
@clerk/nextjs 6.14.0 6.14.3
@hono/node-server 1.14.0 1.14.1
@langchain/community 0.3.39 0.3.40
@nestjs/common 11.0.13 11.0.16
@nestjs/core 11.0.13 11.0.16
@nestjs/platform-express 11.0.13 11.0.16
@remix-run/node 2.16.4 2.16.5
@sveltejs/kit 2.20.4 2.20.5
ai 4.3.4 4.3.5
next 15.2.4 15.3.0
starlight-links-validator 0.14.3 0.15.1
@types/bun 1.2.8 1.2.9
@types/node 22.14.0 22.14.1
@types/react 19.1.0 19.1.1
@types/react-dom 19.1.0 19.1.2

Updates @ai-sdk/openai from 1.3.9 to 1.3.10

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​1.3.10

Patch Changes

  • dbe53e7: adding support for gpt-4o-search-preview and handling unsupported parameters
  • 84ffaba: fix: propagate openai transcription fixes
Commits

Updates @astrojs/starlight from 0.31.1 to 0.33.1

Release notes

Sourced from @​astrojs/starlight's releases.

@​astrojs/starlight@​0.33.1

Patch Changes

  • #3088 1885049 Thanks @​HiDeoo! - Fixes a regression in Starlight version 0.33.0 that caused the description and links to language alternates for multilingual websites to be missing from the <head> of the page.

  • #3065 463adf5 Thanks @​HiDeoo! - Updates the social configuration option TSDoc example to match the shape of the expected value.

@​astrojs/starlight@​0.33.0

Minor Changes

  • #3026 82deb84 Thanks @​HiDeoo! - Fixes a potential list styling issue if the last element of a list item is a <script> tag.

    ⚠️ BREAKING CHANGE:

    This release drops official support for Chromium-based browsers prior to version 105 (released 30 August 2022) and Firefox-based browsers prior to version 121 (released 19 December 2023). You can find a list of currently supported browsers and their versions using this browserslist query.

    With this release, Starlight-generated sites will still work fine on those older browsers except for this small detail in list item styling, but future releases may introduce further breaking changes for impacted browsers, including in patch releases.

  • #3025 f87e9ac Thanks @​delucis! - Makes social configuration more flexible.

    ⚠️ BREAKING CHANGE: The social configuration option has changed syntax. You will need to update this in astro.config.mjs when upgrading.

    Previously, a limited set of platforms were supported using a shorthand syntax with labels built in to Starlight. While convenient, this approach was less flexible and required dedicated code for each social platform added.

    Now, you must specify the icon and label for each social link explicitly and you can use any of Starlight’s built-in icons for social links.

    The following example shows updating the old social syntax to the new:

    - social: {
-   github: 'https://github.com/withastro/starlight',
-   discord: 'https://astro.build/chat',
- },
+ social: [
+   { icon: 'github', label: 'GitHub', href: 'https://github.com/withastro/starlight' },
+   { icon: 'discord', label: 'Discord', href: 'https://astro.build/chat' },
+ ],

  • #2927 c46904c Thanks @​HiDeoo! - Adds the head route data property which contains an array of all tags to include in the <head> of the current page.

    Previously, the <Head> component was responsible for generating a list of tags to include in the <head> of the current page and rendering them. This data is now available as Astro.locals.starlightRoute.head instead and can be modified using route data middleware. The <Head> component now only renders the tags provided in Astro.locals.starlightRoute.head.

  • #2924 6a56d1b Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: Ensures that the <Badge> and <Icon> components no longer render with a trailing space.

    In Astro, components that include styles render with a trailing space which can prevent some use cases from working as expected, e.g. when using such components inlined with text. This change ensures that the <Badge> and <Icon> components no longer render with a trailing space.

    If you were previously relying on that implementation detail, you may need to update your code to account for this change. For example, considering the following code:

... (truncated)

Changelog

Sourced from @​astrojs/starlight's changelog.

0.33.1

Patch Changes

  • #3088 1885049 Thanks @​HiDeoo! - Fixes a regression in Starlight version 0.33.0 that caused the description and links to language alternates for multilingual websites to be missing from the <head> of the page.

  • #3065 463adf5 Thanks @​HiDeoo! - Updates the social configuration option TSDoc example to match the shape of the expected value.

0.33.0

Minor Changes

  • #3026 82deb84 Thanks @​HiDeoo! - Fixes a potential list styling issue if the last element of a list item is a <script> tag.

    ⚠️ BREAKING CHANGE:

    This release drops official support for Chromium-based browsers prior to version 105 (released 30 August 2022) and Firefox-based browsers prior to version 121 (released 19 December 2023). You can find a list of currently supported browsers and their versions using this browserslist query.

    With this release, Starlight-generated sites will still work fine on those older browsers except for this small detail in list item styling, but future releases may introduce further breaking changes for impacted browsers, including in patch releases.

  • #3025 f87e9ac Thanks @​delucis! - Makes social configuration more flexible.

    ⚠️ BREAKING CHANGE: The social configuration option has changed syntax. You will need to update this in astro.config.mjs when upgrading.

    Previously, a limited set of platforms were supported using a shorthand syntax with labels built in to Starlight. While convenient, this approach was less flexible and required dedicated code for each social platform added.

    Now, you must specify the icon and label for each social link explicitly and you can use any of Starlight’s built-in icons for social links.

    The following example shows updating the old social syntax to the new:

    - social: {
-   github: 'https://github.com/withastro/starlight',
-   discord: 'https://astro.build/chat',
- },
+ social: [
+   { icon: 'github', label: 'GitHub', href: 'https://github.com/withastro/starlight' },
+   { icon: 'discord', label: 'Discord', href: 'https://astro.build/chat' },
+ ],

  • #2927 c46904c Thanks @​HiDeoo! - Adds the head route data property which contains an array of all tags to include in the <head> of the current page.

    Previously, the <Head> component was responsible for generating a list of tags to include in the <head> of the current page and rendering them. This data is now available as Astro.locals.starlightRoute.head instead and can be modified using route data middleware. The <Head> component now only renders the tags provided in Astro.locals.starlightRoute.head.

  • #2924 6a56d1b Thanks @​HiDeoo! - ⚠️ BREAKING CHANGE: Ensures that the <Badge> and <Icon> components no longer render with a trailing space.

    In Astro, components that include styles render with a trailing space which can prevent some use cases from working as expected, e.g. when using such components inlined with text. This change ensures that the <Badge> and <Icon> components no longer render with a trailing space.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by matthewp, a new releaser for @​astrojs/starlight since your current version.


Updates @astrojs/vercel from 8.0.4 to 8.1.3

Release notes

Sourced from @​astrojs/vercel's releases.

@​astrojs/vercel@​8.1.3

Patch Changes

@​astrojs/vercel@​8.1.2

Patch Changes

  • Updated dependencies [042d1de]:
    • @​astrojs/internal-helpers@​0.6.1

@​astrojs/vercel@​8.1.1

Patch Changes

@​astrojs/vercel@​8.1.0

Minor Changes

  • #13211 7ea0aba Thanks @​slawekkolodziej! - Adds support for regular expressions in ISR exclude list

    Previously, excluding a page from ISR required explicitly listing it in isr.exclude. As websites grew larger, maintaining this list became increasingly difficult, especially for multiple API routes and pages that needed server-side rendering.

    To address this, ISR exclusions now support regular expressions, allowing for more flexible and scalable configurations.

    // astro.config.mjs
import vercel from '@astrojs/vercel/serverless';
export default defineConfig({
output: 'server',
adapter: vercel({
isr: {
exclude: [
'/preview', // Excludes a specific route (e.g., pages/preview.astro)
'/auth/[page]', // Excludes a dynamic route (e.g., pages/auth/[page].astro)
/^/api/.+/, // Excludes all routes starting with /api/
],
},
}),
});

Patch Changes

  • #13323 80926fa Thanks @​ematipico! - Updates esbuild and vite to the latest to avoid false positives audits warnings caused by esbuild.

  • Updated dependencies [1e11f5e]:

    • @​astrojs/internal-helpers@​0.6.0

... (truncated)

Changelog

Sourced from @​astrojs/vercel's changelog.

8.1.3

Patch Changes

8.1.2

Patch Changes

  • Updated dependencies [042d1de]:
    • @​astrojs/internal-helpers@​0.6.1

8.1.1

Patch Changes

8.1.0

Minor Changes

  • #13211 7ea0aba Thanks @​slawekkolodziej! - Adds support for regular expressions in ISR exclude list

    Previously, excluding a page from ISR required explicitly listing it in isr.exclude. As websites grew larger, maintaining this list became increasingly difficult, especially for multiple API routes and pages that needed server-side rendering.

    To address this, ISR exclusions now support regular expressions, allowing for more flexible and scalable configurations.

    // astro.config.mjs
import vercel from '@astrojs/vercel/serverless';
export default defineConfig({
output: 'server',
adapter: vercel({
isr: {
exclude: [
'/preview', // Excludes a specific route (e.g., pages/preview.astro)
'/auth/[page]', // Excludes a dynamic route (e.g., pages/auth/[page].astro)
/^/api/.+/, // Excludes all routes starting with /api/
],
},
}),
});

Patch Changes

  • #13323 80926fa Thanks @​ematipico! - Updates esbuild and vite to the latest to avoid false positives audits warnings caused by esbuild.

... (truncated)

Commits

Updates @clerk/nextjs from 6.14.0 to 6.14.3

Release notes

Sourced from @​clerk/nextjs's releases.

@​clerk/nextjs@​6.14.3

Patch Changes

@​clerk/nextjs@​6.14.2

Patch Changes

@​clerk/nextjs@​6.14.1

Patch Changes

  • Updated dependencies [f6f275d]:
    • @​clerk/backend@​1.27.1
    • @​clerk/types@​4.51.1
    • @​clerk/clerk-react@​5.26.1
    • @​clerk/shared@​3.4.1
Changelog

Sourced from @​clerk/nextjs's changelog.

6.14.3

Patch Changes

6.14.2

Patch Changes

6.14.1

Patch Changes

  • Updated dependencies [f6f275d]:
    • @​clerk/backend@​1.27.1
    • @​clerk/types@​4.51.1
    • @​clerk/clerk-react@​5.26.1
    • @​clerk/shared@​3.4.1
Commits

Updates @hono/node-server from 1.14.0 to 1.14.1

Release notes

Sourced from @​hono/node-server's releases.

v1.14.1

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.14.0...v1.14.1

Commits

Updates @langchain/community from 0.3.39 to 0.3.40

Release notes

Sourced from @​langchain/community's releases.

0.2.0@next

What's Changed

... (truncated)

Commits

Updates @nestjs/common from 11.0.13 to 11.0.16

Release notes

Sourced from @​nestjs/common's releases.

v11.0.16 (2025-04-11)

v11.0.15 (2025-04-10)

Bug fixes

Committers: 1

v11.0.14 (2025-04-09)

Bug fixes

  • platform-fastify
    • #14511 fix(fastify): adds the non-standard http methods to the instance (@​johaven)

Committers: 1

Commits
  • b6edf9a chore(@​nestjs) publish v11.0.16 release
  • ab79c56 chore: minor tweaks
  • dcc177a Update packages/common/pipes/file/file-type.validator.ts
  • e019da8 refactor(common): move back file type validator options type
  • 4718a64 chore(@​nestjs) publish v11.0.15 release
  • b6078fd refactor(common): move file-type package to peer dependencies
  • f34ef9a refactor(common): refactor code to use simple eval
  • 3ff9024 fix(common): used eval import
  • 63d28bf refactor(common): removed async keyword
  • 5243fca fix(common): update file mime package and add param skip magic numbers
  • Additional commits viewable in compare view

Updates @nestjs/core from 11.0.13 to 11.0.16

Release notes

Sourced from @​nestjs/core's releases.

v11.0.16 (2025-04-11)

v11.0.15 (2025-04-10)

Bug fixes

Committers: 1

v11.0.14 (2025-04-09)

Bug fixes

  • platform-fastify
    • #14511 fix(fastify): adds the non-standard http methods to the instance (@​johaven)

Committers: 1

Commits

Updates @nestjs/platform-express from 11.0.13 to 11.0.16

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.0.16 (2025-04-11)

v11.0.15 (2025-04-10)

Bug fixes

Committers: 1

v11.0.14 (2025-04-09)

Bug fixes

  • platform-fastify
    • #14511 fix(fastify): adds the non-standard http methods to the instance (@​johaven)

Committers: 1

Commits

Updates @remix-run/node from 2.16.4 to 2.16.5

Release notes

Sourced from @​remix-run/node's releases.

v2.16.5

See the changelog for the release notes: https://github.com/remix-run/remix/blob/main/CHANGELOG.md#v2165

Changelog

Sourced from @​remix-run/node's changelog.

2.16.5

Patch Changes

Commits

Updates @sveltejs/kit from 2.20.4 to 2.20.5

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.20.5

Patch Changes

  • allow HandleServerError hook to access getRequestEvent (#13666)

  • fix: prevent Rollup warnings for undefined hooks (#13687)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.20.5

Patch Changes

  • allow HandleServerError hook to access getRequestEvent (#13666)

  • fix: prevent Rollup warnings for undefined hooks (#13687)

Commits

Updates ai from 4.3.4 to 4.3.5

Release notes

Sourced from ai's releases.

[email protected]

Patch Changes

  • 452bf12: fix (ai/mcp): better support for zero-argument MCP tools
Commits

Updates next from 15.2.4 to 15.3.0

Release notes

Sourced from next's releases.

v15.3.0

Core Changes

  • [dev-overlay] Customize <select> styling for consistency: #76973
  • Upgrade React from 029e8bd6-20250306 to 0ca3deeb-20250311: #76989
  • [metadata]: add pinterest meta tag: #76988
  • [dev-overlay] ensure stripping overlay bundle in prod build: #76976
  • Apply env inlining during generate build mode: #76990
  • Turbopack: Implement deploymentId: #76904
  • track persistent caching usage: #76996
  • [metadata] re-insert icons to head for streamed metadata: #76915
  • Upgrade React from 0ca3deeb-20250311 to 6aa8254b-20250312: #77033
  • Move static-env imports: #77035
  • [dev-overlay] Add size setting to preferences: #77027
  • Add config for only generating static env: #77038
  • chore(HMR clients): Clean up and share code between app and pages router:

@dependabot
chore(deps): Bump the arcjet-apps-minor group across 1 directory with…
9474404 
… 18 updates

Bumps the arcjet-apps-minor group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/openai](https://github.com/vercel/ai) | `1.3.9` | `1.3.10` |
| [@astrojs/starlight](https://github.com/withastro/starlight/tree/HEAD/packages/starlight) | `0.31.1` | `0.33.1` |
| [@astrojs/vercel](https://github.com/withastro/astro/tree/HEAD/packages/integrations/vercel) | `8.0.4` | `8.1.3` |
| [@clerk/nextjs](https://github.com/clerk/javascript/tree/HEAD/packages/nextjs) | `6.14.0` | `6.14.3` |
| [@hono/node-server](https://github.com/honojs/node-server) | `1.14.0` | `1.14.1` |
| [@langchain/community](https://github.com/langchain-ai/langchainjs) | `0.3.39` | `0.3.40` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.0.13` | `11.0.16` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.0.13` | `11.0.16` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.0.13` | `11.0.16` |
| [@remix-run/node](https://github.com/remix-run/remix/tree/HEAD/packages/remix-node) | `2.16.4` | `2.16.5` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.20.4` | `2.20.5` |
| [ai](https://github.com/vercel/ai) | `4.3.4` | `4.3.5` |
| [next](https://github.com/vercel/next.js) | `15.2.4` | `15.3.0` |
| [starlight-links-validator](https://github.com/HiDeoo/starlight-links-validator/tree/HEAD/packages/starlight-links-validator) | `0.14.3` | `0.15.1` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.2.8` | `1.2.9` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.14.0` | `22.14.1` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.0` | `19.1.1` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.0` | `19.1.2` |



Updates `@ai-sdk/openai` from 1.3.9 to 1.3.10
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected])

Updates `@astrojs/starlight` from 0.31.1 to 0.33.1
- [Release notes](https://github.com/withastro/starlight/releases)
- [Changelog](https://github.com/withastro/starlight/blob/main/packages/starlight/CHANGELOG.md)
- [Commits](https://github.com/withastro/starlight/commits/@astrojs/[email protected]/packages/starlight)

Updates `@astrojs/vercel` from 8.0.4 to 8.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/vercel/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/[email protected]/packages/integrations/vercel)

Updates `@clerk/nextjs` from 6.14.0 to 6.14.3
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/nextjs/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/[email protected]/packages/nextjs)

Updates `@hono/node-server` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.14.0...v1.14.1)

Updates `@langchain/community` from 0.3.39 to 0.3.40
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Changelog](https://github.com/langchain-ai/langchainjs/blob/main/release_workspace.js)
- [Commits](https://github.com/langchain-ai/langchainjs/commits/@langchain/community==0.3.40)

Updates `@nestjs/common` from 11.0.13 to 11.0.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.0.16/packages/common)

Updates `@nestjs/core` from 11.0.13 to 11.0.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.0.16/packages/core)

Updates `@nestjs/platform-express` from 11.0.13 to 11.0.16
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.0.16/packages/platform-express)

Updates `@remix-run/node` from 2.16.4 to 2.16.5
- [Release notes](https://github.com/remix-run/remix/releases)
- [Changelog](https://github.com/remix-run/remix/blob/main/packages/remix-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/remix/commits/@remix-run/[email protected]/packages/remix-node)

Updates `@sveltejs/kit` from 2.20.4 to 2.20.5
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `ai` from 4.3.4 to 4.3.5
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/[email protected]@4.3.5)

Updates `next` from 15.2.4 to 15.3.0
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.2.4...v15.3.0)

Updates `starlight-links-validator` from 0.14.3 to 0.15.1
- [Release notes](https://github.com/HiDeoo/starlight-links-validator/releases)
- [Changelog](https://github.com/HiDeoo/starlight-links-validator/blob/main/packages/starlight-links-validator/CHANGELOG.md)
- [Commits](https://github.com/HiDeoo/starlight-links-validator/commits/[email protected]/packages/starlight-links-validator)

Updates `@types/bun` from 1.2.8 to 1.2.9
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@types/node` from 22.14.0 to 22.14.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 19.1.0 to 19.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.1.0 to 19.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 1.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@astrojs/starlight"
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: arcjet-apps-minor
- dependency-name: "@astrojs/vercel"
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: arcjet-apps-minor
- dependency-name: "@clerk/nextjs"
  dependency-version: 6.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@hono/node-server"
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@langchain/community"
  dependency-version: 0.3.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@nestjs/common"
  dependency-version: 11.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@nestjs/core"
  dependency-version: 11.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@remix-run/node"
  dependency-version: 2.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: ai
  dependency-version: 4.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: next
  dependency-version: 15.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: arcjet-apps-minor
- dependency-name: starlight-links-validator
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: arcjet-apps-minor
- dependency-name: "@types/bun"
  dependency-version: 1.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@types/node"
  dependency-version: 22.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@types/react"
  dependency-version: 19.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: arcjet-apps-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team April 11, 2025 22:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 11, 2025
@vercel Vercel
Copy link

vercel bot commented Apr 11, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
arcjet-docs ❌ Failed (Inspect) Apr 11, 2025 10:26pm

@socket-security Socket Security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub ↗.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​types/​bun@​1.2.8 ⏵ 1.2.91001004695100
Updated@​sveltejs/​kit@​2.20.4 ⏵ 2.20.599 +110079 +199 +1100
Updatedstarlight-links-validator@​0.14.3 ⏵ 0.15.192 +110080 +193100
Updated@​astrojs/​vercel@​8.0.4 ⏵ 8.1.3981008298 +1100
Updated@​astrojs/​starlight@​0.31.1 ⏵ 0.33.199 +110083 +198100
Updated@​langchain/​community@​0.3.39 ⏵ 0.3.4096 +110090 +1100100
Updated@​hono/​node-server@​1.14.0 ⏵ 1.14.110010010093 +1100
Updated@​clerk/​nextjs@​6.14.0 ⏵ 6.14.310010094100100
Updated@​nestjs/​common@​11.0.13 ⏵ 11.0.16100100 +510095100
Updated@​nestjs/​core@​11.0.13 ⏵ 11.0.169910010095 +3100
Updated@​nestjs/​platform-express@​11.0.13 ⏵ 11.0.1610010010097 +3100
Updatedai@​4.3.4 ⏵ 4.3.5100 +1100100100 +1100
Updated@​types/​react-dom@​19.1.0 ⏵ 19.1.2100 +1100100 +29100 +7100
Updated@​remix-run/​node@​2.16.4 ⏵ 2.16.5100 +1100100 +28100 +4100
Updatednext@​15.2.4 ⏵ 15.3.0100 +20100100 +11100 +3100 +31
Updated@​ai-sdk/​openai@​1.3.9 ⏵ 1.3.10100 +1100100 +17100 +4100
Updated@​types/​react@​19.1.0 ⏵ 19.1.1100 +1100100 +23100 +5100
Updated@​types/​node@​22.14.0 ⏵ 22.14.1100 +1100100 +21100 +5100

View full report ↗

@socket-security Socket Security
Copy link

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub ↗.

Action Severity Alert (click for details)
Block High
[email protected] has a High CVE.

CVE: GHSA-9wv6-86v2-598j path-to-regexp outputs backtracking regular expressions (HIGH)

Affected versions: >= 4.0.0, < 6.3.0

Patched version: 6.3.0

Source: package-lock.json

Source: package.json

ℹ Read more on: This package | This alert | What is a CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report ↗

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 14, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 14, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/arcjet-apps-minor-600775b346 branch April 14, 2025 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants