Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: upgrade dependencies #1384

Merged
merged 4 commits into from
Mar 7, 2024
Merged

chore: upgrade dependencies #1384

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c895dd7
chore: upgrade dependencies
danielroe Mar 7, 2024
40e1c0b
chore: apply automated fixes
autofix-ci[bot] Mar 7, 2024
7c3fe71
chore: bump playwright
danielroe Mar 7, 2024
2e4d515
chore: bump budget
danielroe Mar 7, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/e2e.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ jobs:
if: github.event.deployment_status.state == 'success' || github.event_name == 'workflow_dispatch'
runs-on: ubuntu-latest
container:
image: mcr.microsoft.com/playwright:v1.41.2-focal
image: mcr.microsoft.com/playwright:v1.42.1-focal

steps:
- uses: actions/checkout@v4
Comment on lines 21 to 27
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📝 NOTE
This review was outside the diff hunks, and no overlapping diff hunk was found. Original lines [49-49]

Using variable interpolation ${{...}} directly in a run: step with github context data poses a security risk due to the potential for code injection. To mitigate this risk, consider using an intermediate environment variable within the env: section to store the GitHub context data. Then, reference this environment variable in the run: script, ensuring to enclose it in double quotes. For example:

env:
  BASE_URL_SAFE: ${{ github.event.inputs.url || github.event.deployment.payload.web_url || github.event.deployment_status.target_url }}
run: curl "$BASE_URL_SAFE"

This approach enhances the security of your workflow by treating the GitHub context data as untrusted input.

Expand Down
2 changes: 1 addition & 1 deletion budget.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
},
{
"resourceType": "script",
"budget": 67.8
"budget": 67.9
},
{
"resourceType": "stylesheet",
Expand Down
62 changes: 31 additions & 31 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"test": "vitest run test/unit",
"test:types": "nuxi prepare && vue-tsc --noEmit",
"test:e2e": "playwright test test/e2e",
"test:e2e:update": "docker run --rm --network host -v $(pwd):/work/ -w /work/ -it mcr.microsoft.com/playwright:v1.41.2-focal npx playwright test test/e2e --update-snapshots",
"test:e2e:update": "docker run --rm --network host -v $(pwd):/work/ -w /work/ -it mcr.microsoft.com/playwright:v1.42.1-focal npx playwright test test/e2e --update-snapshots",
"postinstall": "nuxt prepare && pnpm simple-git-hooks install && npx playwright install"
},
"lint-staged": {
Expand All @@ -24,73 +24,73 @@
"*.{css,vue}": "stylelint"
},
"dependencies": {
"@atproto/api": "^0.8.0",
"@iconify-json/ri": "^1.1.19",
"@atproto/api": "^0.10.5",
"@iconify-json/ri": "^1.1.20",
"@iconify-json/svg-spinners": "^1.1.2",
"@iconify-json/tabler": "^1.1.105",
"@iconify-json/tabler": "^1.1.106",
"@nuxt/content": "2.12.0",
"@nuxt/fonts": "0.0.1",
"@nuxt/image": "1.3.0",
"@nuxt/fonts": "0.0.2",
"@nuxt/image": "1.4.0",
"@nuxt/kit": "3.10.3",
"@nuxtjs/color-mode": "3.3.2",
"@nuxtjs/html-validator": "1.6.0",
"@nuxtjs/plausible": "0.2.4",
"@nuxtjs/web-vitals": "0.2.6",
"@unhead/vue": "^1.8.10",
"@unocss/nuxt": "^0.58.3",
"@unocss/postcss": "^0.58.3",
"@unocss/reset": "^0.58.3",
"@unhead/vue": "^1.8.11",
"@unocss/nuxt": "^0.58.5",
"@unocss/postcss": "^0.58.5",
"@unocss/reset": "^0.58.5",
"defu": "^6.1.4",
"feed": "^4.2.2",
"globby": "^14.0.1",
"gray-matter": "4.0.3",
"h3": "^1.10.1",
"h3": "^1.11.1",
"image-meta": "^0.2.0",
"knitwork": "^1.0.0",
"magic-regexp": "0.7.0",
"magic-string": "^0.30.7",
"masto": "^6.5.2",
"mlly": "^1.5.0",
"nitropack": "^2.8.1",
"magic-regexp": "0.8.0",
"magic-string": "^0.30.8",
"masto": "^6.6.4",
"mlly": "^1.6.1",
"nitropack": "^2.9.1",
"nuxt": "3.10.3",
"nuxt-time": "^0.1.2",
"partykit": "0.0.90",
"partysocket": "^1.0.0",
"partykit": "0.0.98",
"partysocket": "^1.0.1",
"pathe": "^1.1.2",
"postcss-nesting": "^12.0.2",
"postcss-nesting": "^12.1.0",
"remark": "^15.0.1",
"remark-html": "^16.0.1",
"rollup-plugin-node-polyfills": "^0.2.1",
"std-env": "^3.7.0",
"ufo": "^1.4.0",
"unenv": "^1.9.0",
"unocss": "^0.58.5",
"unplugin": "^1.7.1",
"vue": "^3.4.19",
"vue-router": "^4.2.5"
"unplugin": "^1.8.3",
"vue": "^3.4.21",
"vue-router": "^4.3.0"
},
"devDependencies": {
"@commitlint/cli": "19.0.3",
"@commitlint/config-conventional": "19.0.3",
"@nuxt/eslint-config": "0.2.0",
"@nuxt/test-utils": "3.11.0",
"@playwright/test": "1.41.2",
"@playwright/test": "1.42.1",
"@vue/test-utils": "2.4.4",
"eslint": "8.56.0",
"eslint": "8.57.0",
"eslint-plugin-nuxt": "4.0.0",
"execa": "8.0.1",
"happy-dom": "13.6.2",
"lint-staged": "15.2.2",
"ofetch": "1.3.3",
"playwright-core": "1.41.2",
"rollup": "4.12.0",
"simple-git-hooks": "2.9.0",
"playwright-core": "1.42.1",
"rollup": "4.12.1",
"simple-git-hooks": "2.10.0",
"stylelint": "16.2.1",
"stylelint-config-recommended-vue": "1.5.0",
"stylelint-config-standard": "36.0.0",
"typescript": "5.3.3",
"vitest": "1.2.2",
"vue-tsc": "2.0.2"
"typescript": "5.4.2",
"vitest": "1.3.1",
"vue-tsc": "2.0.6"
},
"resolutions": {
"@nuxt/schema": "3.10.3"
Expand All @@ -99,5 +99,5 @@
"commit-msg": "npx commitlint --edit $1",
"pre-commit": "npx lint-staged"
},
"packageManager": "[email protected].2"
"packageManager": "[email protected].4"
}
Loading
Loading