Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 14, 2024

Bumps react-dropzone from 14.2.3 to 14.2.9.

Release notes

Sourced from react-dropzone's releases.

v14.2.9

14.2.9 (2024-10-03)

Bug Fixes

  • disable file access API by default (c0255d5)

v14.2.8

14.2.8 (2024-10-03)

Bug Fixes

  • revert min node version to 10.13 (d1ae54d)

v14.2.7

14.2.7 (2024-10-03)

Bug Fixes

v14.2.6

14.2.6 (2024-10-02)

Bug Fixes

  • ensure package works as a module (2471dd9)

v14.2.5

14.2.5 (2024-10-02)

Bug Fixes

  • ensure proper readonly arrays for types (d7799eb)

v14.2.4

14.2.4 (2024-10-02)

Bug Fixes

  • add path to acceptedFiles and fileRejections (960c6d3)
Commits
  • c0255d5 fix: disable file access API by default
  • 842b0cc ci: run tests on node 18 as well
  • d1ae54d fix: revert min node version to 10.13
  • 68a8a78 fix: ensure typings can be resolved and close #1371
  • f2233ca docs: fix hook missing dep warning in preview example
  • 2471dd9 fix: ensure package works as a module
  • d7799eb fix: ensure proper readonly arrays for types
  • db97f3e docs: fix tests badge
  • c350579 build: bump nvm node version to 20
  • 821fd6a ci: use node 20 to release
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR focuses on updating dependencies in the package.json and pnpm-lock.yaml files, particularly the version of react-dropzone and associated packages, as well as adding esbuild as a dependency in multiple places.

Detailed summary

  • Updated react-dropzone from ^14.2.3 to ^14.2.9 in apps/dashboard/package.json.
  • Updated version references for react-dropzone in pnpm-lock.yaml.
  • Added esbuild@0.23.1 as a dependency in multiple entries within pnpm-lock.yaml.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [react-dropzone](https://github.com/react-dropzone/react-dropzone) from 14.2.3 to 14.2.9.
- [Release notes](https://github.com/react-dropzone/react-dropzone/releases)
- [Commits](react-dropzone/react-dropzone@v14.2.3...v14.2.9)

---
updated-dependencies:
- dependency-name: react-dropzone
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 14, 2024
@changeset-bot
Copy link

changeset-bot bot commented Oct 14, 2024

⚠️ No Changeset found

Latest commit: 2428035

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel
Copy link

vercel bot commented Oct 14, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
docs-v2 🛑 Canceled (Inspect) Oct 14, 2024 8:35pm
thirdweb_playground 🛑 Canceled (Inspect) Oct 14, 2024 8:35pm
thirdweb-www 🛑 Canceled (Inspect) Oct 14, 2024 8:35pm
wallet-ui 🛑 Canceled (Inspect) Oct 14, 2024 8:35pm

@graphite-app
Copy link
Contributor

graphite-app bot commented Oct 14, 2024

Your org has enabled the Graphite merge queue for merging into main

Add the label “merge-queue” to the PR and Graphite will automatically add it to the merge queue when it’s ready to merge. Or use the label “hotfix” to add to the merge queue as a hot fix.

You must have a Graphite account and log in to Graphite in order to use the merge queue. Sign up using this link.

@vercel vercel bot temporarily deployed to Preview – thirdweb-www October 14, 2024 20:33 Inactive
@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/react-dropzone@14.2.9 Transitive: environment +8 887 kB rolandjitsu

🚮 Removed packages: npm/react-dropzone@14.2.3

View full report↗︎

@github-actions github-actions bot added the Dashboard Involves changes to the Dashboard. label Oct 14, 2024
@vercel vercel bot temporarily deployed to Preview – docs-v2 October 14, 2024 20:34 Inactive
@vercel vercel bot temporarily deployed to Preview – wallet-ui October 14, 2024 20:34 Inactive
@vercel vercel bot temporarily deployed to Preview – thirdweb_playground October 14, 2024 20:35 Inactive
@jnsdls jnsdls merged commit e06b40e into main Oct 14, 2024
22 of 27 checks passed
@jnsdls jnsdls deleted the dependabot/npm_and_yarn/react-dropzone-14.2.9 branch October 14, 2024 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dashboard Involves changes to the Dashboard. Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants