Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency flowbite-react to ^0.10.0 #116

Merged
merged 1 commit into from
Nov 29, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 26, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
flowbite-react (source) ^0.9.0 -> ^0.10.0 age adoption passing confidence

Release Notes

themesberg/flowbite-react (flowbite-react)

v0.10.2

Compare Source

Patch Changes
  • #​1190 25bb353 Thanks @​ddiasfront! - ### Datepicker Component Updates

    The Datepicker has been enhanced with several improvements:

    1. Controlled Inputs: Supports controlled inputs via value and defaultValue props, enabling programmatic date updates without manual clicks.
    2. State Management: Optimized internal state management using useMemo and useEffect.
    3. Documentation: Added sections in documentation for controlled usage and handling null values.
    4. Test Cases: Comprehensive unit tests added for date handling.
    5. Storybook: Improved stories, showcasing different states (controlled/uncontrolled).
Files Updated:
  • apps/web/content/docs/components/datepicker.mdx: Added controlled usage section.

  • Datepicker.spec.tsx: Added unit tests.

  • Datepicker.stories.tsx: Enhanced story variants.

  • Datepicker.tsx: Expanded DatepickerProps.

  • DatepickerContext.tsx: Adjusted selectedDate type.

  • Decades.tsx, Months.tsx, Years.tsx: Updated logic to check for selectedDate.

  • #​1484 38913e5 Thanks @​KRTirtho! - fix: autocomplete for string enums with dynamic value not working

v0.10.1

Compare Source

Patch Changes

v0.10.0

Compare Source

Minor Changes
Patch Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone America/New_York.

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 3 times, most recently from 6f48e49 to 9d79262 Compare December 16, 2023 04:48
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 11 times, most recently from f07b1fa to 19ff32d Compare January 12, 2024 06:30
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 3 times, most recently from 873ac69 to c37f031 Compare January 25, 2024 04:00
Copy link

socket-security bot commented Jan 25, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/sharp@0.33.4
  • Install script: install
  • Source: node install/check
🚫
Telemetry npm/next@15.0.0-rc.0
  • Note: Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1 . See https://nextjs.org/telemetry for more information
🚫
Telemetry npm/next@14.2.5
  • Note: Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1 . See https://nextjs.org/telemetry for more information
🚫
AI detected potential malware npm/next@14.2.5
  • Notes: The primary concern in the code is the use of vm.runInNewContext to execute file content, which can lead to arbitrary code execution if the file content is not trusted. This warrants a higher risk score. However, there is no evidence of malware or obfuscation in the code.
  • Confidence: 0.60
  • Severity: 0.90
🚫
Potential typo squat npm/next-recompose-plugins@3.0.0 🚫
Install scripts npm/cypress@13.13.2
  • Install script: postinstall
  • Source: node index.js --exec install
🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is telemetry?

This package contains telemetry which tracks how it is used.

Most telemetry comes with settings to disable it. Consider disabling telemetry if you do not want to be tracked.

What is AI detected malware?

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Given the AI system's identification of this package as malware, extreme caution is advised. It is recommended to avoid downloading or installing this package until the threat is confirmed or flagged as a false positive.

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/sharp@0.33.4
  • @SocketSecurity ignore npm/next@15.0.0-rc.0
  • @SocketSecurity ignore npm/next@14.2.5
  • @SocketSecurity ignore npm/next-recompose-plugins@3.0.0
  • @SocketSecurity ignore npm/cypress@13.13.2

@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 9 times, most recently from 63383f4 to 2934d45 Compare January 31, 2024 03:23
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from 2934d45 to 7408ea4 Compare February 2, 2024 04:25
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 4 times, most recently from f78fcbf to bea4274 Compare February 11, 2024 16:37
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch 6 times, most recently from a40d876 to bef7535 Compare February 17, 2024 07:26
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from bef7535 to f7825c3 Compare April 4, 2024 12:48
@renovate renovate bot changed the title chore(deps): update dependency flowbite-react to ^0.7.0 chore(deps): update dependency flowbite-react to ^0.8.0 Apr 4, 2024
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from f7825c3 to fc57295 Compare April 17, 2024 01:15
@renovate renovate bot changed the title chore(deps): update dependency flowbite-react to ^0.8.0 chore(deps): update dependency flowbite-react to ^0.9.0 Apr 17, 2024
@renovate renovate bot enabled auto-merge (rebase) June 4, 2024 13:04
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from fc57295 to a554778 Compare June 4, 2024 13:04
auto-merge was automatically disabled June 4, 2024 13:04

Base branch requires signed commits

@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from a554778 to 44d8196 Compare June 4, 2024 13:19
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from 44d8196 to 73c80e9 Compare June 20, 2024 16:31
@renovate renovate bot changed the title chore(deps): update dependency flowbite-react to ^0.9.0 chore(deps): update dependency flowbite-react to ^0.10.0 Jun 20, 2024
Copy link

socket-security bot commented Jun 20, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/core@7.25.2 environment, filesystem, unsafe +39 10.9 MB nicolo-ribaudo
npm/@babel/plugin-transform-modules-commonjs@7.24.8 Transitive: environment +28 6.72 MB nicolo-ribaudo
npm/@babel/preset-env@7.25.3 environment Transitive: filesystem +127 16.6 MB nicolo-ribaudo
npm/@commitlint/cli@19.4.0 Transitive: environment, eval, filesystem, shell, unsafe +73 3.17 MB escapedcat
npm/@commitlint/cz-commitlint@19.4.0 Transitive: environment, eval, filesystem, unsafe +41 2.29 MB escapedcat
npm/@cypress/code-coverage@3.12.44 Transitive: environment, eval, filesystem, network, shell, unsafe +43 11.5 MB cypress-npm-publisher
npm/@happy-dom/jest-environment@14.12.3 Transitive: environment, eval, filesystem, network, shell, unsafe +28 9.6 MB davidortner
npm/@headlessui/react@2.1.2 environment +22 9.94 MB malfaitrobin
npm/@heroicons/react@2.1.5 Transitive: environment +2 3.71 MB malfaitrobin
npm/@next/bundle-analyzer@14.2.5 Transitive: environment, filesystem, network +6 1.98 MB vercel-release-bot
npm/@percy/cli@1.29.1 environment, filesystem, unsafe Transitive: eval, network, shell +66 5.92 MB percy-admin
npm/@sentry/nextjs@8.25.0 environment, filesystem, network Transitive: shell, unsafe +135 1.4 GB sentry-bot
npm/@sentry/profiling-node@8.25.0 Transitive: environment, filesystem, network, shell, unsafe +47 20.3 MB benvinegar, billyvg, evanpurkhiser, ...8 more
npm/@swc/core@1.7.10 environment, filesystem, shell +14 445 MB kdy1, kwonoj
npm/@testing-library/cypress@10.0.2 None +2 319 kB testing-library-bot
npm/@testing-library/jest-dom@6.4.8 None +6 2.01 MB testing-library-bot
npm/@types/node@20.14.15 None +1 2.16 MB types
npm/@typescript-eslint/eslint-plugin@7.18.0 None +4 4.15 MB jameshenry
npm/@typescript-eslint/parser@7.18.0 None +1 25 kB jameshenry
npm/apexcharts@3.52.0 None 0 4.61 MB junedchhipa
npm/autoprefixer@10.4.20 environment Transitive: filesystem +3 2.37 MB ai
npm/commitizen@4.3.0 eval Transitive: environment, filesystem +16 2.06 MB commitizen-bot
npm/commitlint-config-monorepo@2.0.2 None 0 4.07 kB pskfyi
npm/concurrently@8.2.2 environment, filesystem +7 2.01 MB gustavohenke
npm/cross-env@7.0.3 environment Transitive: filesystem, shell +4 75.8 kB kentcdodds
npm/cypress@13.13.2 environment, filesystem, shell, unsafe Transitive: eval +26 10.5 MB atofstryker
npm/dotenv-defaults@5.0.2 Transitive: environment, filesystem +1 86.4 kB mrsteele
npm/dotenv-mono@1.3.14 environment, filesystem +1 141 kB marcocesarato
npm/eslint-config-airbnb-base@15.0.0 None 0 94 kB ljharb
npm/eslint-config-airbnb-typescript@18.0.0 None 0 26.2 kB iamturns
npm/eslint-config-next@14.2.5 unsafe +1 260 kB vercel-release-bot
npm/eslint-config-prettier@9.1.0 None 0 20.8 kB lydell
npm/eslint-plugin-cypress@3.4.0 None +1 193 kB cypress-npm-publisher
npm/eslint-plugin-import@2.29.1 filesystem, unsafe +5 1.28 MB ljharb
npm/eslint-plugin-jest-dom@5.4.0 None +2 361 kB benmonro
npm/eslint-plugin-jest-formatting@3.1.0 None 0 75.6 kB dangreenleipciger
npm/eslint-plugin-jest@28.8.0 filesystem 0 349 kB simenb
npm/eslint-plugin-jsx-a11y@6.9.0 None +4 814 kB ljharb
npm/eslint-plugin-node@11.1.0 filesystem Transitive: environment +6 523 kB mysticatea
npm/eslint-plugin-prettier@5.2.1 None 0 34.3 kB jounqin
npm/eslint-plugin-react-hooks@4.6.2 environment 0 118 kB react-bot
npm/eslint-plugin-react@7.35.0 filesystem Transitive: environment +8 1.23 MB ljharb
npm/eslint-plugin-simple-import-sort@12.1.1 None 0 38.3 kB lydell
npm/eslint-plugin-sonarjs@1.0.4 None 0 227 kB sonartech
npm/eslint-plugin-tailwindcss@3.17.4 Transitive: filesystem +5 481 kB francoismassart
npm/eslint-plugin-testing-library@6.3.0 filesystem 0 261 kB testing-library-bot
npm/eslint-plugin-unicorn@53.0.0 Transitive: environment, filesystem +5 3.67 MB sindresorhus
npm/eslint-plugin-unused-imports@4.1.3 unsafe 0 14.9 kB antfu
npm/eslint@9.9.0 Transitive: environment, filesystem, shell, unsafe +29 3.99 MB eslintbot
npm/execa@9.3.0 environment Transitive: filesystem, shell +9 435 kB ehmicky
npm/flowbite-react@0.10.1 Transitive: environment +10 3.95 MB sutusebastian
npm/flowbite@2.5.1 None 0 5.29 MB zoliszogyenyi
npm/http-proxy@1.18.1 network 0 232 kB jcrugzz
npm/husky@9.1.4 environment, filesystem, shell 0 4.01 kB typicode
npm/identity-obj-proxy@3.0.0 None 0 8.38 kB keyanzhang
npm/ignore-walk@6.0.5 filesystem +1 20.2 kB npm-cli-ops
npm/jest-environment-jsdom@29.7.0 Transitive: environment, eval, filesystem +27 1.22 MB simenb
npm/jest-fetch-mock@3.0.3 network 0 104 kB jefflau
npm/jest-mock-fetch@2.0.5 None 0 44.9 kB knee-cola
npm/jest@29.7.0 None +8 582 kB simenb
npm/jsvectormap@1.6.0 None 0 529 kB mustafaomar
npm/ky@1.5.0 None 0 153 kB sindresorhus
npm/lint-staged@15.2.8 Transitive: environment +4 949 kB okonet
npm/localforage@1.10.0 network 0 468 kB tofumatt
npm/match-sorter@6.3.4 None +2 447 kB kentcdodds
npm/next-recompose-plugins@3.0.0 None 0 29.1 kB arklanq
npm/next-seo@6.5.0 Transitive: environment +2 513 kB garymeehan
npm/next-sitemap@4.2.3 Transitive: filesystem +6 658 kB iamvishnusankar
npm/nextjs-progressbar@0.0.16 Transitive: environment +2 37.6 kB apal21
npm/node-mocks-http@1.15.1 environment, network +1 98 kB eugef
npm/npm-run-all2@6.2.2 environment, filesystem Transitive: shell +5 274 kB bret
npm/nyc@15.1.0 environment, filesystem, unsafe Transitive: shell +24 811 kB coreyfarrell
npm/postcss@8.4.41 environment, filesystem +3 368 kB ai
npm/prettier-eslint-cli@8.0.1 Transitive: environment, filesystem +16 1.91 MB zimme
npm/prettier@3.3.3 environment, filesystem, unsafe 0 7.7 MB prettier-bot
npm/prop-types@15.8.1 environment +3 139 kB ljharb
npm/react-apexcharts@1.4.1 Transitive: environment +2 40.7 kB junedchhipa
npm/react-icons@5.2.1 Transitive: environment +2 85.1 MB kamijin_fanta
npm/react-lite-youtube-embed@2.4.0 Transitive: environment +2 144 kB ibrahimcesar
npm/react-sortablejs@6.1.4 Transitive: environment +2 95 kB andresin87
npm/rimraf@5.0.10 environment, filesystem +9 1.61 MB isaacs
npm/semver@7.6.3 None 0 95.8 kB npm-cli-ops
npm/sharp@0.33.4 environment Transitive: filesystem, shell +1 521 kB lovell
npm/shx@0.3.4 None +1 93.1 kB nfischer
npm/skinview3d@3.0.1 None 0 2.37 MB hacksore
npm/sort-by@1.2.0 None 0 11.1 kB kvnneff
npm/start-server-and-test@2.0.5 environment Transitive: eval, unsafe +2 671 kB bahmutov
npm/svgmap@2.11.1 None 0 1.69 MB stephanwagner
npm/sync-dotenv@2.7.0 filesystem, shell +9 372 kB codeshifu
npm/tailwindcss@3.4.9 environment, filesystem +8 6.18 MB adamwathan
npm/three@0.164.1 None 0 21.9 MB mrdoob
npm/ts-jest@29.2.4 environment, filesystem, unsafe +14 1.34 MB kul
npm/typescript@5.5.4 None 0 21.9 MB typescript-bot
npm/use-prefers-color-scheme@1.1.3 Transitive: environment +2 35.8 kB rfoel
npm/zod@3.23.8 None 0 667 kB colinmcd94

🚮 Removed packages: npm/@babel/core@7.24.6, npm/@babel/plugin-transform-modules-commonjs@7.24.6, npm/@babel/preset-env@7.24.6, npm/@commitlint/cli@19.3.0, npm/@commitlint/cz-commitlint@19.2.0, npm/@cypress/code-coverage@3.12.39, npm/@damirn/fastify-formidable@3.0.3, npm/@fastify/accepts-serializer@5.3.0, npm/@fastify/accepts@4.3.0, npm/@fastify/autoload@5.8.2, npm/@fastify/cookie@9.3.1, npm/@fastify/cors@9.0.1, npm/@fastify/etag@5.2.0, npm/@fastify/formbody@7.4.0, npm/@fastify/helmet@11.1.1, npm/@fastify/jwt@8.0.1, npm/@fastify/multipart@8.2.0, npm/@fastify/routes-stats@3.4.0, npm/@fastify/secure-session@7.5.1, npm/@fastify/sensible@5.6.0, npm/@fastify/swagger-ui@3.0.0, npm/@fastify/swagger@8.14.0, npm/@fastify/view@9.1.0, npm/@happy-dom/jest-environment@14.11.0, npm/@headlessui/react@2.0.4, npm/@heroicons/react@2.1.3, npm/@immobiliarelabs/fastify-sentry@8.0.1, npm/@mgcrea/fastify-graceful-exit@1.1.1, npm/@nestjs/cli@10.3.2, npm/@nestjs/common@10.3.8, npm/@nestjs/config@3.2.2, npm/@nestjs/core@10.3.8, npm/@nestjs/platform-fastify@10.3.8, npm/@nestjs/swagger@7.3.1, npm/@nestjs/testing@10.3.8, npm/@next/bundle-analyzer@14.2.3, npm/@next/env@14.2.3, npm/@npmcli/ci-detect@3.0.2, npm/@ory/kratos-client@1.1.0, npm/@percy/cli@1.28.7, npm/@prisma/client@5.14.0, npm/@rollup/plugin-commonjs@25.0.8, npm/@rollup/plugin-json@6.1.0, npm/@rollup/plugin-node-resolve@15.2.3, npm/@rollup/plugin-typescript@11.1.6, npm/@semantic-release-plus/docker@3.1.3, npm/@semantic-release/changelog@6.0.3, npm/@semantic-release/git@10.0.1, npm/@semantic-release/github@10.0.5, npm/@semantic-release/npm@12.0.1, npm/@semantic-release/release-notes-generator@13.0.0, npm/@sentry/nextjs@8.4.0, npm/@sentry/profiling-node@8.4.0, npm/@testing-library/cypress@10.0.1, npm/@testing-library/jest-dom@6.4.5, npm/@types/dotenv-defaults@2.0.4, npm/@types/figlet@1.5.8, npm/@types/ioredis-mock@8.2.5, npm/@types/mocha@10.0.6, npm/@types/node@20.12.12, npm/@types/useragent@2.3.4, npm/@typescript-eslint/eslint-plugin@7.10.0, npm/@typescript-eslint/parser@7.10.0, npm/apexcharts@3.49.1, npm/autoprefixer@10.4.19, npm/babel-jest@29.7.0, npm/babel-plugin-transform-vite-meta-env@1.0.3, npm/class-transformer@0.5.1, npm/class-validator@0.14.1, npm/eslint-plugin-jest@28.5.0

View full report↗︎

@renovate renovate bot enabled auto-merge (rebase) August 11, 2024 17:44
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from 73c80e9 to a52a177 Compare August 11, 2024 17:44
auto-merge was automatically disabled August 11, 2024 17:44

Base branch requires signed commits

@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from a52a177 to 205576f Compare August 11, 2024 17:55
@renovate renovate bot enabled auto-merge (squash) November 29, 2024 15:16
@renovate renovate bot force-pushed the dep/flowbite-react-0.x branch from 205576f to 4c19f58 Compare November 29, 2024 15:16
@renovate renovate bot merged commit c88c4a8 into master Nov 29, 2024
6 of 11 checks passed
@renovate renovate bot deleted the dep/flowbite-react-0.x branch November 29, 2024 15:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants