riley/sanity-nextjs-landing-pages

Fork 0

Bump json5 and next in /web #38

Open

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/web/json5-and-next-1.0.2 into master

dependabot[bot] commented

2023-01-07 17:48:34 +00:00

(Migrated from github.com)

Bumps json5 to 1.0.2 and updates ancestor dependency next. These dependencies need to be updated together.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates next from 8.1.0 to 13.1.1

Release notes

Sourced from next's releases.

v13.1.1

Core Changes

Exclude srcset from svg image: #44308

Fix CSS resource path not matched in __entry_css_files__: #44310

Fix next/image 404 when basePath and trailingSlash defined: #44312

Documentation Changes

Remove experimental for modularizeImports from docs and example: #44311

Example Changes

Updated dependencies for with-tailwindcss example: #44289

Misc Changes

Use turbo for packing files in test setup: #44074

Credits

Huge thanks to @JanKaifer, @Nutlope, @styfle, and @chibicode for helping!

v13.1.1-canary.1

Core Changes

Fix next/image 404 when basePath and trailingSlash defined: #44312

Documentation Changes

Remove experimental for modularizeImports from docs and example: #44311

Credits

Huge thanks to @chibicode and @styfle for helping!

v13.1.1-canary.0

Core Changes

Exclude srcset from svg image: #44308

Fix CSS resource path not matched in __entry_css_files__: #44310

Example Changes

Updated dependencies for with-tailwindcss example: #44289

Misc Changes

Use turbo for packing files in test setup: #44074

... (truncated)

Commits

4ac737e v13.1.1
f0a8b7e v13.1.1-canary.1
b0a1e99 Fix next/image 404 when basePath and trailingSlash defined (#44312)
f0aa10b Remove experimental for modularizeImports from docs and example (#44311)
44548dd v13.1.1-canary.0
00b2113 Fix CSS resource path not matched in __entry_css_files__ (#44310)
fd0d0f5 Exclude srcset from svg image (#44308)
8a9133d Updated dependencies for with-tailwindcss example (#44289)
fd9ec64 Use turbo for packing files in test setup (#44074)
02489c2 v13.1.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [json5](https://github.com/json5/json5) to 1.0.2 and updates ancestor dependency [next](https://github.com/vercel/next.js). These dependencies need to be updated together. Updates `json5` from 1.0.1 to 1.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v1.0.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>). This has been backported to v1. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/298">#298</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>Unreleased [<a href="https://github.com/json5/json5/tree/main">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.3...HEAD">diff</a>]</h3> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> <h3>v2.2.1 [<a href="https://github.com/json5/json5/tree/v2.2.1">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.0...v2.2.1">diff</a>]</h3> <ul> <li>Fix: Removed dependence on minimist to patch CVE-2021-44906. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/266">#266</a>)</li> </ul> <h3>v2.2.0 [<a href="https://github.com/json5/json5/tree/v2.2.0">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.3...v2.2.0">diff</a>]</h3> <ul> <li>New: Accurate and documented TypeScript declarations are now included. There is no need to install <code>@types/json5</code>. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/236">#236</a>, <a href="https://github-redirect.dependabot.com/json5/json5/issues/244">#244</a>)</li> </ul> <h3>v2.1.3 [<a href="https://github.com/json5/json5/tree/v2.1.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.2...v2.1.3">diff</a>]</h3> <ul> <li>Fix: An out of memory bug when parsing numbers has been fixed. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/228">#228</a>, <a href="https://github-redirect.dependabot.com/json5/json5/issues/229">#229</a>)</li> </ul> <h3>v2.1.2 [<a href="https://github.com/json5/json5/tree/v2.1.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.1.1...v2.1.2">diff</a>]</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/a62db1e51e1031d92ac260f5bb38bbed1fdbc754"><code>a62db1e</code></a> 1.0.2</li> <li><a href="https://github.com/json5/json5/commit/e0c23fe458a77c0b2cdb271376be5d8d0908133c"><code>e0c23fe</code></a> docs: update CHANGELOG for v1.0.2</li> <li><a href="https://github.com/json5/json5/commit/62a65408408d40aeea14c7869ed327acead12972"><code>62a6540</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li>See full diff in <a href="https://github.com/json5/json5/compare/v1.0.1...v1.0.2">compare view</a></li> </ul> </details> <br /> Updates `next` from 8.1.0 to 13.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/next.js/releases">next's releases</a>.</em></p> <blockquote> <h2>v13.1.1</h2> <h3>Core Changes</h3> <ul> <li>Exclude <code>srcset</code> from svg image: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44308">#44308</a></li> <li>Fix CSS resource path not matched in <code>__entry_css_files__</code>: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44310">#44310</a></li> <li>Fix <code>next/image</code> 404 when <code>basePath</code> and <code>trailingSlash</code> defined: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44312">#44312</a></li> </ul> <h3>Documentation Changes</h3> <ul> <li>Remove experimental for modularizeImports from docs and example: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44311">#44311</a></li> </ul> <h3>Example Changes</h3> <ul> <li>Updated dependencies for <code>with-tailwindcss</code> example: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44289">#44289</a></li> </ul> <h3>Misc Changes</h3> <ul> <li>Use turbo for packing files in test setup: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44074">#44074</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/JanKaifer"><code>@JanKaifer</code></a>, <a href="https://github.com/Nutlope"><code>@Nutlope</code></a>, <a href="https://github.com/styfle"><code>@styfle</code></a>, and <a href="https://github.com/chibicode"><code>@chibicode</code></a> for helping!</p> <h2>v13.1.1-canary.1</h2> <h3>Core Changes</h3> <ul> <li>Fix <code>next/image</code> 404 when <code>basePath</code> and <code>trailingSlash</code> defined: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44312">#44312</a></li> </ul> <h3>Documentation Changes</h3> <ul> <li>Remove experimental for modularizeImports from docs and example: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44311">#44311</a></li> </ul> <h3>Credits</h3> <p>Huge thanks to <a href="https://github.com/chibicode"><code>@chibicode</code></a> and <a href="https://github.com/styfle"><code>@styfle</code></a> for helping!</p> <h2>v13.1.1-canary.0</h2> <h3>Core Changes</h3> <ul> <li>Exclude <code>srcset</code> from svg image: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44308">#44308</a></li> <li>Fix CSS resource path not matched in <code>__entry_css_files__</code>: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44310">#44310</a></li> </ul> <h3>Example Changes</h3> <ul> <li>Updated dependencies for <code>with-tailwindcss</code> example: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44289">#44289</a></li> </ul> <h3>Misc Changes</h3> <ul> <li>Use turbo for packing files in test setup: <a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44074">#44074</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/next.js/commit/4ac737ee6b25a2e1cf44f1f6fafa444b5f9dec6d"><code>4ac737e</code></a> v13.1.1</li> <li><a href="https://github.com/vercel/next.js/commit/f0a8b7ec6edad045dc8f5580c273e06a38addeaa"><code>f0a8b7e</code></a> v13.1.1-canary.1</li> <li><a href="https://github.com/vercel/next.js/commit/b0a1e99606a7a7329f885d4c418943c5612d2a0f"><code>b0a1e99</code></a> Fix <code>next/image</code> 404 when <code>basePath</code> and <code>trailingSlash</code> defined (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44312">#44312</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/f0aa10b2165e661c6ed2494787eab31891115065"><code>f0aa10b</code></a> Remove experimental for modularizeImports from docs and example (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44311">#44311</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/44548dda362d8f679afb50ce0940dfd443f8d0c6"><code>44548dd</code></a> v13.1.1-canary.0</li> <li><a href="https://github.com/vercel/next.js/commit/00b21138411a8f8588cd785747886377cca884f8"><code>00b2113</code></a> Fix CSS resource path not matched in <code>__entry_css_files__</code> (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44310">#44310</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/fd0d0f5a87b47f22c3fd73735ab06c676b91a1f3"><code>fd0d0f5</code></a> Exclude <code>srcset</code> from svg image (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44308">#44308</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/8a9133ddb31e72d1fc986547e7cc639488d6a323"><code>8a9133d</code></a> Updated dependencies for <code>with-tailwindcss</code> example (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44289">#44289</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/fd9ec646acc26e746822cff903981ca7d7d366e1"><code>fd9ec64</code></a> Use turbo for packing files in test setup (<a href="https://github-redirect.dependabot.com/vercel/next.js/issues/44074">#44074</a>)</li> <li><a href="https://github.com/vercel/next.js/commit/02489c2f4aae461543925c190183343bb8c2e78a"><code>02489c2</code></a> v13.1.0</li> <li>Additional commits viewable in <a href="https://github.com/vercel/next.js/compare/v8.1.0...v13.1.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~vercel-release-bot">vercel-release-bot</a>, a new releaser for next since your current version.</p> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/RileySeaburg/sanity-nextjs-landing-pages/network/alerts). </details>

codetether[bot] commented

2026-06-04 16:11:28 +00:00

(Migrated from github.com)

🛠️ CodeTether Fix

Picked up this request for PR #38 on branch dependabot/npm_and_yarn/web/json5-and-next-1.0.2. I’m preparing the workspace and will push changes directly to the existing PR branch if the task succeeds. I will also make sure the branch is mergeable with master.

## 🛠️ CodeTether Fix Picked up this request for PR #38 on branch `dependabot/npm_and_yarn/web/json5-and-next-1.0.2`. I’m preparing the workspace and will push changes directly to the existing PR branch if the task succeeds. I will also make sure the branch is mergeable with `master`.

codetether[bot] commented

2026-06-14 08:39:28 +00:00

(Migrated from github.com)

🛠️ CodeTether Fix

Worker error after claim: Git command failed: fatal: detected dubious ownership in repository at '/workspace/repos/1497c85dcc391994'
To add an exception for this directory, call:

git config --global --add safe.directory /workspace/repos/1497c85dcc391994

## 🛠️ CodeTether Fix Worker error after claim: Git command failed: fatal: detected dubious ownership in repository at '/workspace/repos/1497c85dcc391994' To add an exception for this directory, call: git config --global --add safe.directory /workspace/repos/1497c85dcc391994

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin dependabot/npm_and_yarn/web/json5-and-next-1.0.2:dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git switch dependabot/npm_and_yarn/web/json5-and-next-1.0.2

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git switch dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git rebase master

git switch master

git merge --ff-only dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git switch dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git rebase master

git switch master

git merge --no-ff dependabot/npm_and_yarn/web/json5-and-next-1.0.2

git switch master

git merge --squash dependabot/npm_and_yarn/web/json5-and-next-1.0.2