Skip to content
This repository has been archived by the owner on Apr 20, 2023. It is now read-only.

[Snyk] Upgrade next from 9.3.4 to 9.3.5 #61

Merged
merged 1 commit into from
Apr 18, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade next from 9.3.4 to 9.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 15 versions ahead of your current version.
  • The recommended version was released 3 days ago, on 2020-04-15.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-SETVALUE-450213
Proof of Concept
Prototype Pollution
SNYK-JS-SETVALUE-450213
Proof of Concept
Prototype Pollution
SNYK-JS-MIXINDEEP-450212
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-450202
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Information Exposure
SNYK-JS-KINDOF-537849
Proof of Concept
Release notes
Package name: next
  • 9.3.5 - 2020-04-15

    Patches

    • Fix styled-components example README notes: #11548
    • Prevent extraneous re-renders with next/dynamic: #11587
    • Update to make sure to respond with 400 for invalid URLs: #11561
    • Add: jsx to list of supported files in docs: #11579
    • [docs] document how root routes coexist with dynamic api routes: #11591
    • [docs] Remove broken link to example api-routes-micro: #11597
    • Update minimum required node version to be more specific: #11604
    • Rename unstable GSP field: #11602
    • Replace getInitialProps with getServerSideProps: #11586
    • [Docs] Remove concepts folder: #11621
    • Make providers headlines so they become linkable: #11613
    • [fix:typo] - Fixing a typo in the typescript example: #11630
    • Fix Preview Mode in <iframe>: #11638
    • Update FAQ link: #11636
    • Updated with-shallow-routing to use getServerSideProps: #11585
    • Add error when GSSP methods are added as page component members: #11645
    • Warn when user has pages/_error but no pages/404: #11603
    • Updating native-url version: #11670
    • Integrate with-atlaskit: #11269
    • Fix documentation link in Basic API routes example: #11671
    • Add links to sections in data fetching documentation: #11666
    • [create-next-app] update logic for shouldUseYarn function: #11683
    • Update Automatic Static Optimization docs: #11618
    • A little bit of maintenance on the ReasonML examples: #11662
    • Use function for function components: #11695
    • Add dependencies used by compiled files: #11699
    • Add example for polyfilling DOMParser in Node: #10782
    • Update postcss.config.js: #11366
    • Update webpack and mkdirp: #11165
    • Add repository URL to package.json: #10748
    • Any elements must be direct children of next/head: #11557
    • Add routing example with dynamic as prop: #11114
    • Mention <title> and styled-jsx caveats in Document's docs: #11499
    • [docs] Mention the new data fetching methods on missing places: #11620
    • Allow top-level GitHub repo URLs as examples: #11691
    • Import from compiled: #11684
    • Remove node-promisepipe library: #11700
    • Update compiler.ts Improve TypeScript typings: #11074
    • Cleanup Build Output Types: #11076
    • Fix Utility Types: #11077
    • Add warning when a page is rendered without a starting /: #11418
    • Update dependencies: #11707
    • Update to not modify req.url for getServerSideProps requests: #11637
    • Update typescript.md: #11717
    • Remove outdated sentence from static-export example: #11708
    • Update got in create-next-app: #11725
    • Pre-ncc compiled packages to prevent re-nccing unnecessarily: #11569
    • [Examples] Update mobx examples to not use SSR: #11576
    • [Example] Remove SSR from with-cerebral: #11562
    • [Examples] Add SWR to api-routes and api-routes-middleware: #11385
    • [example] Add SWR to api-routes-graphql: #11383
    • Chore(deps): remove next-css from examples/antd: #10804
    • Docs(examples): add with-iron-session example: #10973
    • Update to merge props from GSSP methods with _app pageProps: #11709
    • Confirm if user wants example when creating app: #10543
    • Fix inconsistent handling for /index: #11643
    • Updated with-webpack-bundle-size-analyzer to use SSG: #11657
    • Make sure to handle "next" import gracefully: #11733
    • Updated with-xstate: #11658
    • [Examples] Update with-mobx-state-tree examples: #11736
    • Bump timeout for create-next-app tests: #11743
    • [contributing docs] Add more details about chromedriver for ma…: #11739
    • Fix: small typo in SERVER_PROPS_EXPORT_ERROR constant: #11749
    • Add New Provider: #11757
    • Minor with-docker readme grammar fix: #11760
    • Update start script in preact example: #11763
    • Chore(example): Update styled-components to v5: #11765
    • Update to latest version of AMP optimizer: #11753
    • Fix just headers not being applied in dev mode: #11755
    • Remove duplicate content: #11750
    • Upgrade ci-info: #11758
    • Fix typo: #11786
    • Update CNA tests on windows for further investigating: #11779
    • Add Node.js version to Bug template: #11781
    • Update auto export opt-out warning and err.sh: #11801
    • Replace brackets in CSS classes for dynamic routes: #11795
    • Add Prismic Example: #10897
    • Update dev script in examples/using-preact: #11805
    • Handle more invalid CSS class characters: #11809
    • Externalize next-server from Server Builds: #11819
    • Make sure to pass through query values for custom routes: #11812
    • Update dependencies: #11833
    • Minor change in hello-world/package.json: #11830
    • Rename functional component -> function component: #11850
    • Add displayName property to React Context objects: #11829
    • Add gip identifiers to NEXT_DATA: #11835
    • [examples/custom-server-fastify] Fix ts(2341): #11844
    • Update @types in create-next-app: #11815
    • [examples/with-react-intl] Fix issues with Intl.js polyfill: #11806
    • Update sentry example: #11701
    • Adds first input delay performance metric: #8884
    • Remove update-check.d.ts: #11858
    • Fix Lockfile: 9fdd6ed
    • Update Serverless Note in Docs: #11861
    • Chore(example): Update styled-components to v5 in with-typescript-styled-components: #11766
    • Feat(example): add CRUD example with next-connect and passport: #11359
    • Replaced express with next-connect: #11747
    • Update shallow routing docs: #11616
    • Add stats config for load tests: #11868
    • Add basePath in link component and add/remove it consistently: #9988
    • Revert "minor change in hello-world/package.json": #11874
    • Remove with-cookie-auth: #11865
    • Remove unused import: #11875
    • Fix Situation Where Build Can Hang Indefinitely: #11881
    • Handle Potential Promise Rejection in Serverless: #11882
    • Add support for params in header key/values: #10324
    • Fix(export): fallback to empty string for basePath: #11880
    • Update with-redux-thunk example to include HMR: #11816

    Credits

    Huge thanks to @mattcarlotta, @devknoll, @kvoncode, @sw-yx, @tsriram, @ijjk, @djanda97, @lfades, @janpio, @noejon, @jansepke, @janicklas-ralph, @asotoglez, @TalAter, @kandros, @scull7, @chibicode, @fabianishere, @PaulPCIO, @mjziolko, @ykzts, @yossisp, @karlhorky, @vassbence, @bduffany, @matamatanot, @lifeiscontent, @joeytepp, @kkobiela, @zfben, @mottox2, @viztor, @vvo, @merelinguist, @zackkrida, @sdhani, @stigkj, @agarwalrounak, @timneutkens, @armujahid, @Timer, @liulanz, @NMinhNguyen, @davecardwell, @MicrochipQ, @a14m, @housseindjirdeh, @hoangvvo, and @Fonger for helping!

  • 9.3.5-canary.13 - 2020-04-14

    Patches

    • Update with-redux-thunk example to include HMR: #11816

    Credits

    Huge thanks to @mattcarlotta for helping!

  • 9.3.5-canary.12 - 2020-04-14

    Patches

    • Handle Potential Promise Rejection in Serverless: #11882
    • Add support for params in header key/values: #10324
    • Fix(export): fallback to empty string for basePath: #11880

    Credits

    Huge thanks to @ijjk and @Fonger for helping!

  • 9.3.5-canary.11 - 2020-04-14

    Patches

    • Remove with-cookie-auth: #11865
    • Remove unused import: #11875
    • Fix Situation Where Build Can Hang Indefinitely: #11881

    Credits

    Huge thanks to @lfades and @timneutkens for helping!

  • 9.3.5-canary.10 - 2020-04-14

    Patches

    • Update @types in create-next-app: #11815
    • [examples/with-react-intl] Fix issues with Intl.js polyfill: #11806
    • Update sentry example: #11701
    • Adds first input delay performance metric: #8884
    • Remove update-check.d.ts: #11858
    • Fix Lockfile: 9fdd6ed
    • Update Serverless Note in Docs: #11861
    • Chore(example): Update styled-components to v5 in with-typescript-styled-components: #11766
    • Feat(example): add CRUD example with next-connect and passport: #11359
    • Replaced express with next-connect: #11747
    • Update shallow routing docs: #11616
    • Add stats config for load tests: #11868
    • Add basePath in link component and add/remove it consistently: #9988
    • Revert "minor change in hello-world/package.json": #11874

    Credits

    Huge thanks to @matamatanot, @fabianishere, @a14m, @housseindjirdeh, @Timer, @mottox2, @hoangvvo, @lfades, and @ijjk for helping!

  • 9.3.5-canary.9 - 2020-04-13

    Patches

    • Make sure to pass through query values for custom routes: #11812
    • Update dependencies: #11833
    • Minor change in hello-world/package.json: #11830
    • Rename functional component -> function component: #11850
    • Add displayName property to React Context objects: #11829
    • Add gip identifiers to NEXT_DATA: #11835
    • [examples/custom-server-fastify] Fix ts(2341): #11844

    Credits

    Huge thanks to @liulanz, @NMinhNguyen, @davecardwell, and @MicrochipQ for helping!

  • 9.3.5-canary.8 - 2020-04-11

    Patches

    • Externalize next-server from Server Builds: #11819

    Credits

    Huge thanks to @Timer for helping!

  • 9.3.5-canary.7 - 2020-04-10

    Patches

    • Fix typo: #11786
    • Update CNA tests on windows for further investigating: #11779
    • Add Node.js version to Bug template: #11781
    • Update auto export opt-out warning and err.sh: #11801
    • Replace brackets in CSS classes for dynamic routes: #11795
    • Add Prismic Example: #10897
    • Update dev script in examples/using-preact: #11805
    • Handle more invalid CSS class characters: #11809

    Credits

    Huge thanks to @agarwalrounak, @timneutkens, and @armujahid for helping!

  • 9.3.5-canary.6 - 2020-04-09

    Patches

    • Updated with-webpack-bundle-size-analyzer to use SSG: #11657
    • Make sure to handle "next" import gracefully: #11733
    • Updated with-xstate: #11658
    • [Examples] Update with-mobx-state-tree examples: #11736
    • Bump timeout for create-next-app tests: #11743
    • [contributing docs] Add more details about chromedriver for ma…: #11739
    • Fix: small typo in SERVER_PROPS_EXPORT_ERROR constant: #11749
    • Add New Provider: #11757
    • Minor with-docker readme grammar fix: #11760
    • Update start script in preact example: #11763
    • Chore(example): Update styled-components to v5: #11765
    • Update to latest version of AMP optimizer: #11753
    • Fix just headers not being applied in dev mode: #11755
    • Remove duplicate content: #11750
    • Upgrade ci-info: #11758

    Credits

    Huge thanks to @djanda97, @ijjk, @lfades, @zackkrida, @sdhani, @mottox2, and @stigkj for helping!

  • 9.3.5-canary.5 - 2020-04-07

    Patches

    • Update typescript.md: #11717
    • Remove outdated sentence from static-export example: #11708
    • Update got in create-next-app: #11725
    • Pre-ncc compiled packages to prevent re-nccing unnecessarily: #11569
    • [Examples] Update mobx examples to not use SSR: #11576
    • [Example] Remove SSR from with-cerebral: #11562
    • [Examples] Add SWR to api-routes and api-routes-middleware: #11385
    • [example] Add SWR to api-routes-graphql: #11383
    • Chore(deps): remove next-css from examples/antd: #10804
    • Docs(examples): add with-iron-session example: #10973
    • Update to merge props from GSSP methods with _app pageProps: #11709
    • Confirm if user wants example when creating app: #10543
    • Fix inconsistent handling for /index: #11643

    Credits

    Huge thanks to @zfben, @mottox2, @matamatanot, @ijjk, @lfades, @viztor, @vvo, and @merelinguist for helping!

  • 9.3.5-canary.4 - 2020-04-06
  • 9.3.5-canary.3 - 2020-04-06
  • 9.3.5-canary.2 - 2020-04-04
  • 9.3.5-canary.1 - 2020-04-03
  • 9.3.5-canary.0 - 2020-04-02
  • 9.3.4 - 2020-04-01
from next GitHub release notes
Commit messages
Package name: next
  • c0724ca v9.3.5
  • df1e548 v9.3.5-canary.13
  • ffa4089 Update with-redux-thunk example to include HMR (#11816)
  • 682120b v9.3.5-canary.12
  • 5248e18 fix(export): fallback to empty string for basePath (#11880)
  • ab18c79 Add support for params in header key/values (#10324)
  • b1aa594 Handle Potential Promise Rejection in Serverless (#11882)
  • d1b987f v9.3.5-canary.11
  • 841cd6c Fix Situation Where Build Can Hang Indefinitely (#11881)
  • 4e6d6d2 Remove unused import (#11875)
  • 4094dfe Remove with-cookie-auth (#11865)
  • 5713bcb v9.3.5-canary.10
  • f0422f2 Revert "minor change in hello-world/package.json" (#11874)
  • d3e308a Add basePath in link component and add/remove it consistently (#9988)
  • 0b51b23 Add stats config for load tests (#11868)
  • 2b1f959 Update shallow routing docs (#11616)
  • 20f6429 Replaced express with next-connect (#11747)
  • ee372f4 feat(example): add CRUD example with next-connect and passport (#11359)
  • 6533515 chore(example): Update styled-components to v5 in with-typescript-styled-components (#11766)
  • 39c068e Update Serverless Note in Docs (#11861)
  • 9fdd6ed Fix Lockfile
  • 7dbdf1d Remove update-check.d.ts (#11858)
  • 04ceba4 Adds first input delay performance metric (#8884)
  • 0ccce72 Update sentry example (#11701)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@yowainwright yowainwright merged commit 213769a into master Apr 18, 2020
@yowainwright yowainwright deleted the snyk-upgrade-087bfca64c4503441ef3546be66b3641 branch April 18, 2020 19:05
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants