chore: update dependencies 📦

[bigint]

No description provided.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
prerender	✅ Ready (Inspect)	Visit Preview	May 14, 2023 2:53pm
ui	✅ Ready (Inspect)	Visit Preview	May 14, 2023 2:53pm
web	✅ Ready (Inspect)	Visit Preview	May 14, 2023 2:53pm

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore turbo@1.9.4
• @SocketSecurity ignore next@13.4.2

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
turbo@1.9.4 (added)	postinstall	package.json, pnpm-lock.yaml

📞 Telemetry

This package contains telemetry which tracks you.

Package	Note	Source
next@13.4.2 (added)	Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1	pnpm-lock.yaml, apps/prerender/package.json, pnpm-lock.yaml, apps/storybook/package.json via @storybook/nextjs@7.0.11, ui@0.0.0, apps/web/package.json, pnpm-lock.yaml via next-themes@0.2.1, ui@0.0.0, packages/ui/package.json, pnpm-lock.yaml

Pull request alert summary

Issue	Status
Install scripts	⚠️ 1 issue
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	⚠️ 1 issue
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

➕ Added Package	Capability Access	+/- Transitive Count	Publisher
next@13.4.2	eval, network, filesystem, shell, environment	+9	vercel-release-bot
turbo@1.9.4	network, filesystem, shell, environment	+0	turbobot
eslint-config-next@13.4.2	None	+70	vercel-release-bot
@types/node@20.1.4	None	+0	types

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
storybook@7.0.11	7.0.10...7.0.11	None	+22/-23	shilman
@storybook/addon-essentials@7.0.11	7.0.10...7.0.11	None	+33/-34	shilman
@storybook/addon-links@7.0.11	7.0.10...7.0.11	None	+11/-10	shilman
@storybook/theming@7.0.11	7.0.10...7.0.11	None	+1/-1	shilman
@storybook/nextjs@7.0.11	7.0.10...7.0.11	None	+36/-28	shilman
@storybook/addon-styling@1.0.8	1.0.6...1.0.8	None	+16/-21	shaunlloyd
@storybook/manager-api@7.0.11	7.0.10...7.0.11	None	+8/-7	shilman
@storybook/blocks@7.0.11	7.0.10...7.0.11	None	+17/-15	shilman
@storybook/react@7.0.11	7.0.10...7.0.11	None	+15/-13	shilman
@tanstack/react-query@4.29.7	4.29.5...4.29.7	None	+1/-0	tannerlinsley
framer-motion@10.12.10	10.12.9...10.12.10	None	+0/-0	popmotion
arbundles@0.9.6	0.9.5...0.9.6	None	+2/-0	jessetherobot
@aws-sdk/client-s3@3.332.0	3.329.0...3.332.0	None	+11/-11	aws-sdk-bot
@cloudflare/workers-types@4.20230511.0	4.20230419.0...4.20230511.0	None	+0/-0	wrangler-publisher
@aws-sdk/client-sts@3.332.0	3.329.0...3.332.0	None	+8/-8	aws-sdk-bot