Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: Bump @connectrpc/connect-web from 1.6.1 to 2.0.0 #2286

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 20, 2024

Bumps @connectrpc/connect-web from 1.6.1 to 2.0.0.

Release notes

Sourced from @​connectrpc/connect-web's releases.

v2.0.0

What's Changed

  • We're upgrading to Protobuf-ES version 2. It's the largest change in this release.
  • Connect-ES no longer needs its own code generator plugin.
  • We're adding support for Next.js 15, Fastify 5, and Express 5.
  • We're dropping support for old versions of Node.js and TypeScript. You'll need at least Node.js 18.14.1 and TypeScript 4.9.6.

The upgrade of the Protobuf runtime brings support for Editions and new APIs for Protobuf messages with support for custom options. Messages are now plain TypeScript types, which greatly improves compatibility with the ecosystem. For example, messages can be passed from a server-side component in Next.js to a client-side component without losing any data or types. To learn more about the enhancements, see the release blog post for Protobuf-ES v2.

[!TIP] If you are already using Connect, see our migration guide to upgrade to version 2.

Full Changelog

Full Changelog: connectrpc/connect-es@v1.6.1...v2.0.0

v2.0.0-rc.3

What's Changed

This is a release candidate for version 2. See here for an introduction.

Full Changelog: connectrpc/connect-es@v2.0.0-rc.2...v2.0.0-rc.3

v2.0.0-rc.2

What's Changed

This is a release candidate for version 2. See here for an introduction.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner November 20, 2024 06:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 20, 2024
Copy link

trunk-io bot commented Nov 20, 2024

Merging to main in this repository is managed by Trunk.

  • To merge this pull request, check the box to the left or comment /trunk merge below.

@blaine-arcjet blaine-arcjet marked this pull request as draft November 20, 2024 15:19
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/connectrpc/connect-web-2.0.0 branch 2 times, most recently from 7c21575 to 31a8137 Compare November 20, 2024 17:40
Copy link

socket-security bot commented Nov 20, 2024

New dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@connectrpc/[email protected] network Transitive: environment +2 2.3 MB srikrsna-buf

View full report↗︎

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/connectrpc/connect-web-2.0.0 branch 4 times, most recently from 2007e2e to d8c9c49 Compare November 25, 2024 18:26
Bumps [@connectrpc/connect-web](https://github.com/connectrpc/connect-es/tree/HEAD/packages/connect-web) from 1.6.1 to 2.0.0.
- [Release notes](https://github.com/connectrpc/connect-es/releases)
- [Commits](https://github.com/connectrpc/connect-es/commits/v2.0.0/packages/connect-web)

---
updated-dependencies:
- dependency-name: "@connectrpc/connect-web"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/connectrpc/connect-web-2.0.0 branch from d8c9c49 to 342041b Compare November 25, 2024 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants