Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump react-redux from 7.2.4 to 7.2.6 in /webapp #836

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 12, 2021

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps react-redux from 7.2.4 to 7.2.6.

Release notes

Sourced from react-redux's releases.

v7.2.6

Shameless plug: I'm working on a new company called Spaceship 🚀 It's a tool to launch your code anywhere in one click. Check it out!

Just a quick fix for a Yarn install warning. Sorry about the noise!

Changes

  • Remove workspaces from our package.json to silence a Yarn warning (@​timdorr)

v7.2.5

This release shrinks the size of our internal Subscription class, and updates useSelector to avoid an unnecessary selector call on mount.

Changes

Subscription Size Refactor

Our internal Subscription implementation has been written as a class ever since it was added in v5. By rewriting it as a closure factory, we were able to shave a few bytes off the final bundle size.

useSelector Mount Optimization

A user noticed that useSelector had never been given an early "bail out if the root state is the same" check to match how connect works. This resulted in a usually-unnecessary second call to the provided selector on mount. We've added that check.

Entry Point Consolidation

We've consolidated the list of exported public APIs into a single file, and both the index.js and alternate-renderers.js entry points now re-export everything from that file. No meaningful change here, just shuffling lines of code around for consistency.

Other Updates

React-Redux v8 and React 18 Development

With the announcement of React 18, we've been working with the React team to plan our migration path to keep React-Redux fully compatible with React's upcoming features.

We've already migrated the React-Redux main development branch to TypeScript, and are prototyping compatibility implementation updates. We'd appreciate any assistance from the community in testing out these changes so that we can ensure React-Redux works great for everyone when React 18 is ready!

Internal Tooling Updates

Our master branch now uses Yarn v2 for package management, is built with TypeScript, and we've made CI updates to test against multiple TS versions.

The 7.x branch has also been updated to use Yarn v2 for consistency.

These only affect contributors to the React-Redux package itself.

Changelog

reduxjs/react-redux@v7.2.4...v7.2.5

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript labels Nov 12, 2021
@JanCizmar
Copy link
Contributor

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webapp/main/react-redux-7.2.6 branch from 9585fdf to e532f23 Compare February 11, 2022 12:26
Bumps [react-redux](https://github.com/reduxjs/react-redux) from 7.2.4 to 7.2.6.
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](reduxjs/react-redux@v7.2.4...v7.2.6)

---
updated-dependencies:
- dependency-name: react-redux
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webapp/main/react-redux-7.2.6 branch from e532f23 to bc370de Compare February 21, 2022 06:13
@JanCizmar JanCizmar merged commit 6f73e5f into main Feb 21, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/webapp/main/react-redux-7.2.6 branch February 21, 2022 06:14
JanCizmar added a commit that referenced this pull request Jan 3, 2024
<p>This PR was automatically created by Snyk using the credentials of a
real user.</p><br /><h3>Snyk has created this PR to upgrade posthog-js
from 1.70.1 to 1.88.4.</h3>

:information_source: Keep your dependencies up-to-date. This makes it
easier to fix existing vulnerabilities and to more quickly identify and
fix newly disclosed vulnerabilities when they affect your project.
<hr/>

- The recommended version is **65 versions** ahead of your current
version.
- The recommended version was released **24 days ago**, on 2023-11-09.


<details>
<summary><b>Release notes</b></summary>
<br/>
  <details>
    <summary>Package name: <b>posthog-js</b></summary>
    <ul>
      <li>
        <b>1.88.4</b> - 2023-11-09
      </li>
      <li>
        <b>1.88.3</b> - 2023-11-08
      </li>
      <li>
        <b>1.88.2</b> - 2023-11-08
      </li>
      <li>
<b>1.88.1</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.88.1">2023-11-02</a></br>No
content.
      </li>
      <li>
<b>1.88.0</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.88.0">2023-11-02</a></br>No
content.
      </li>
      <li>
<b>1.87.6</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.6">2023-10-31</a></br>No
content.
      </li>
      <li>
<b>1.87.5</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.5">2023-10-30</a></br>No
content.
      </li>
      <li>
<b>1.87.4</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.4">2023-10-30</a></br>No
content.
      </li>
      <li>
<b>1.87.3</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.3">2023-10-30</a></br>No
content.
      </li>
      <li>
<b>1.87.2</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.2">2023-10-27</a></br>No
content.
      </li>
      <li>
<b>1.87.1</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.1">2023-10-26</a></br>No
content.
      </li>
      <li>
<b>1.87.0</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.87.0">2023-10-26</a></br>No
content.
      </li>
      <li>
<b>1.86.0</b> - <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases/tag/v1.86.0">2023-10-26</a></br>No
content.
      </li>
      <li>
        <b>1.85.4</b> - 2023-10-26
      </li>
      <li>
        <b>1.85.3</b> - 2023-10-25
      </li>
      <li>
        <b>1.85.2</b> - 2023-10-24
      </li>
      <li>
        <b>1.85.1</b> - 2023-10-24
      </li>
      <li>
        <b>1.85.0</b> - 2023-10-24
      </li>
      <li>
        <b>1.84.4</b> - 2023-10-24
      </li>
      <li>
        <b>1.84.3</b> - 2023-10-23
      </li>
      <li>
        <b>1.84.2</b> - 2023-10-23
      </li>
      <li>
        <b>1.84.1</b> - 2023-10-19
      </li>
      <li>
        <b>1.84.0</b> - 2023-10-18
      </li>
      <li>
        <b>1.83.3</b> - 2023-10-17
      </li>
      <li>
        <b>1.83.2</b> - 2023-10-17
      </li>
      <li>
        <b>1.83.1</b> - 2023-10-16
      </li>
      <li>
        <b>1.83.0</b> - 2023-10-10
      </li>
      <li>
        <b>1.82.3</b> - 2023-10-06
      </li>
      <li>
        <b>1.82.2</b> - 2023-10-05
      </li>
      <li>
        <b>1.82.1</b> - 2023-10-04
      </li>
      <li>
        <b>1.82.0</b> - 2023-10-04
      </li>
      <li>
        <b>1.81.4</b> - 2023-10-04
      </li>
      <li>
        <b>1.81.3</b> - 2023-10-02
      </li>
      <li>
        <b>1.81.2</b> - 2023-09-28
      </li>
      <li>
        <b>1.81.1</b> - 2023-09-26
      </li>
      <li>
        <b>1.81.0</b> - 2023-09-25
      </li>
      <li>
        <b>1.80.0</b> - 2023-09-25
      </li>
      <li>
        <b>1.79.1</b> - 2023-09-20
      </li>
      <li>
        <b>1.79.0</b> - 2023-09-15
      </li>
      <li>
        <b>1.78.6</b> - 2023-09-15
      </li>
      <li>
        <b>1.78.5</b> - 2023-09-14
      </li>
      <li>
        <b>1.78.4</b> - 2023-09-13
      </li>
      <li>
        <b>1.78.3</b> - 2023-09-13
      </li>
      <li>
        <b>1.78.2</b> - 2023-09-12
      </li>
      <li>
        <b>1.78.1</b> - 2023-09-07
      </li>
      <li>
        <b>1.78.0</b> - 2023-09-07
      </li>
      <li>
        <b>1.77.3</b> - 2023-09-05
      </li>
      <li>
        <b>1.77.2</b> - 2023-08-25
      </li>
      <li>
        <b>1.77.1</b> - 2023-08-22
      </li>
      <li>
        <b>1.77.0</b> - 2023-08-18
      </li>
      <li>
        <b>1.76.0</b> - 2023-08-10
      </li>
      <li>
        <b>1.75.4</b> - 2023-08-09
      </li>
      <li>
        <b>1.75.3</b> - 2023-08-02
      </li>
      <li>
        <b>1.75.2</b> - 2023-07-26
      </li>
      <li>
        <b>1.75.1</b> - 2023-07-26
      </li>
      <li>
        <b>1.75.0</b> - 2023-07-25
      </li>
      <li>
        <b>1.74.0</b> - 2023-07-25
      </li>
      <li>
        <b>1.73.1</b> - 2023-07-21
      </li>
      <li>
        <b>1.73.0</b> - 2023-07-20
      </li>
      <li>
        <b>1.72.3</b> - 2023-07-19
      </li>
      <li>
        <b>1.72.2</b> - 2023-07-19
      </li>
      <li>
        <b>1.72.1</b> - 2023-07-18
      </li>
      <li>
        <b>1.72.0</b> - 2023-07-18
      </li>
      <li>
        <b>1.71.0</b> - 2023-07-13
      </li>
      <li>
        <b>1.70.2</b> - 2023-07-11
      </li>
      <li>
        <b>1.70.1</b> - 2023-07-10
      </li>
    </ul>
from <a
href="https://snyk.io/redirect/github/PostHog/posthog-js/releases">posthog-js
GitHub release notes</a>
  </details>
</details>


<details>
  <summary><b>Commit messages</b></summary>
  </br>
  <details>
    <summary>Package name: <b>posthog-js</b></summary>
    <ul>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/e00992df049df5dbc98bd93ce354c59a974bee73">e00992d</a>
chore: Bump version to 1.88.4</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/b0007f3e2dbec44a979ac5b723102cabc48b03bd">b0007f3</a>
fix(surveys): Send responded property with every type of survey
(#883)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/b2fc9e5116eb68a96c89553306816e1951aacdbe">b2fc9e5</a>
Bump playground next yarn version (#874)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/62d40fbc9cfec1a008d708bc4dde5f936dac34a7">62d40fb</a>
chore: convert 2 more test files to remove given and switch to TS
(#882)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/328407128b5a6bf574cc7ff07bbcdccf7b7e6b62">3284071</a>
chore: Bump version to 1.88.3</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/6c2df0e94a59c97ee31edcf10984ab643cd3c421">6c2df0e</a>
fix(surveys): whitelabel, input radio grouping, and auto text color bugs
(#881)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/c62351d553e2552c92d1001137bb84980f92d347">c62351d</a>
chore: Bump version to 1.88.2</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/5417b82f18955d7fbc80e2f1b7b0d3778ee15b42">5417b82</a>
fix: session id should start null (#878)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/10fd7f4fa083f997d31a4a4c7be7d311d0a95e74">10fd7f4</a>
chore(deps): bump @ babel/traverse from 7.11.0 to 7.23.2 (#835)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/3f2e8ab120ac26441386d034f1cddff0a8eaa539">3f2e8ab</a>
chore(deps): bump @ babel/traverse from 7.12.12 to 7.23.2 in /react
(#836)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/5ba3e385b6c5d83d9f16383e666e1d1d2c6af5a5">5ba3e38</a>
chore: Bump version to 1.88.1</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/0348d7633c66a158000b3c1370bc7752ae616c43">0348d76</a>
chore(deps): bump next from 13.1.6 to 13.5.0 in /playground/nextjs
(#855)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/e16431cf586d95eb8dcbed64ae09bf276c7bf4f3">e16431c</a>
Tweak session prop names (#873)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/e168dab2badc6421f548abdd8e288754b9da8aa7">e168dab</a>
chore: Bump version to 1.88.0</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/4213ffae62087a83f0f7d9abe83a7ff484aae481">4213ffa</a>
feat(web-analytics): Add client-side session params (#869)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/96544a81e25150fc6a7fee929eb6ac20e89c195c">96544a8</a>
chore: Bump version to 1.87.6</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/dc19279ebcad9d015cda147ecee8d88dec3ec5b5">dc19279</a>
fix: add tests for browser and browser version detection (#870)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/24fcf1678e8848c2f0c2a5f3e63ec0942cf2396e">24fcf16</a>
chore: Bump version to 1.87.5</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/97029d947d35206f1976e5804f1a58d210fa9eb9">97029d9</a>
fix: include raw user agent in event properties (#868)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/bf818561eb6451684ae493e357f924514c1ac3f1">bf81856</a>
chore: Bump version to 1.87.4</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/3f254cd9d6e3e6d5905fc49899a3ee2b2d349176">3f254cd</a>
fix: logging pointless error when offline (#866)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/5abc41626dbf9b08eb3207f9bfcd6d272e9c690c">5abc416</a>
chore: Bump version to 1.87.3</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/0fe7971f958a910b0c2d18a13092aec3b4b6e0cf">0fe7971</a>
feat: retry count in url (#864)</li>
<li><a
href="https://snyk.io/redirect/github/PostHog/posthog-js/commit/6c4961f8e94d17fbc17f520f2ec401008d9d6348">6c4961f</a>
chore: Bump version to 1.87.2</li>
    </ul>

<a
href="https://snyk.io/redirect/github/PostHog/posthog-js/compare/388d1b03c4046bd38293e28890d9a2677fff089c...e00992df049df5dbc98bd93ce354c59a974bee73">Compare</a>
  </details>
</details>
<hr/>

**Note:** *You are seeing this because you or someone else with access
to this repository has authorized Snyk to open upgrade PRs.*

For more information: <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI3MDAzNDRmZS01YWNmLTRmNTMtOWQwMi1kYjI3MDhkNTMwNWYiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjcwMDM0NGZlLTVhY2YtNGY1My05ZDAyLWRiMjcwOGQ1MzA1ZiJ9fQ=="
width="0" height="0"/>

🧐 [View latest project
report](https://app.snyk.io/org/jancizmar/project/b0bcfaa3-849f-4ad3-a7bc-e7f1b8f77516?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)

🛠 [Adjust upgrade PR
settings](https://app.snyk.io/org/jancizmar/project/b0bcfaa3-849f-4ad3-a7bc-e7f1b8f77516/settings/integration?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr)

🔕 [Ignore this dependency or unsubscribe from future upgrade
PRs](https://app.snyk.io/org/jancizmar/project/b0bcfaa3-849f-4ad3-a7bc-e7f1b8f77516/settings/integration?pkg&#x3D;posthog-js&amp;utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;upgrade-pr#auto-dep-upgrades)

<!---
(snyk:metadata:{"prId":"700344fe-5acf-4f53-9d02-db2708d5305f","prPublicId":"700344fe-5acf-4f53-9d02-db2708d5305f","dependencies":[{"name":"posthog-js","from":"1.70.1","to":"1.88.4"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/jancizmar/project/b0bcfaa3-849f-4ad3-a7bc-e7f1b8f77516?utm_source=github&utm_medium=referral&page=upgrade-pr","projectPublicId":"b0bcfaa3-849f-4ad3-a7bc-e7f1b8f77516","env":"prod","prType":"upgrade","vulns":[],"issuesToFix":[],"upgrade":[],"upgradeInfo":{"versionsDiff":65,"publishedDate":"2023-11-09T17:50:39.155Z"},"templateVariants":[],"hasFixes":false,"isMajorUpgrade":false,"isBreakingChange":false,"priorityScoreList":[]})
--->

Co-authored-by: snyk-bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant