Advanced Opensource Status Page Solution for Everyone with Simple Admin Dashboard.

Last update: Jul 19, 2022

Related tags

Overview

About UpStats

There are many great Opensource, Hosted Solutions for Status Page, however, I didn't find one that really suit my needs so we created this enhanced one. I want to create a Status Page so amazing that it'll be the last one you ever need. I think this is the One.

Here's why:

Managing your site's right from your Mobile is now easier with Mobile First Dashboard.
You don't need to do the task, you can appoint others to do your Tasks.
Let your user to know about your System Status directly via Email.
Don't let your Telegram Bots simply Down

Since your needs maybe different.So I'll be adding more in the near future. You may also suggest changes by forking this repo and creating a pull request or opening an issue. Thanks to all the people have have contributed to expanding UpStats!

Built with

Getting Started

Clone the Repo

git clone https://github.com/UpStats/UpStats.git

Open next.config.js file and replace with your Details

MONGODB_URI - Get from MongoDB.com
jwtPrivateKey - can be Random word like Password, make sure it's not Public
admin_email - Your Email, Required to access Dashboard

Open public/assets/ and replace Favicon.ico
Open public/assets/img/ and replace with your images.
Deploy UpStats Worker

You can deploy UpStats on Vercel

Demo

UpStats Homepage

UpStats Admin Panel

Contributing

Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are greatly appreciated.

Fork the Project
Create your Feature Branch
Commit your Changes
Push to the Branch
Open a Pull Request
That's it

License

Distributed under the GNU GPLV3 License. See LICENSE for more information.

About US

UpStats is developed by ToolsHD and Gowtham

Comments

Bump next from 11.1.1 to 11.1.3
Bumps next from 11.1.1 to 11.1.3.

Release notes

Sourced from next's releases.

v11.1.3

See https://github.com/vercel/next.js/releases/v12.0.5 for details about this patch.

v11.1.3-canary.105

Core Changes

Update swc-minify-enabled link: #30290

Fix middleware header propagation: #30288

Move outputFileTracing config up: #30295

Track usage of swc features: #30297

Ensure null bytes in resolved path are handled: #30313

Improve deprecation errors for new middleware API: #30316

Documentation Changes

Add more docs.: #30320

Example Changes

Update image component example to use AVIF: #30294

Credits

Huge thanks to @ijjk, @styfle, @padmaia, @javivelasco, and @leerob for helping!

v11.1.3-canary.104

Misc Changes

Add necessary workflow job dependencies: #30291

v11.1.3-canary.103

Core Changes

Warn when mutating res if not streaming: #30284

Chore/publish all swc: #30289

Credits

Huge thanks to @kara for helping!

v11.1.3-canary.102

Core Changes

Add warning when LCP image is missing priority prop: #30221

New Middleware API signature: #30282

Fix trace case with tsconfig/jsconfig baseUrl: #30286

Documentation Changes

... (truncated)

Commits

ec1a0f7 v11.1.3

4dc9bba Add no-verify-access for lerna

e314019 use correct token

1a40e71 fix lint

b01acc1 Update branch name to next-11

66de88d Use next-11 tag

303bc0f Allow publishing on v11-patch branch

f59c82b Enable GitHub actions for v11-patch branch

4888713 Ensure invalid URLs respond with 400 correctly

97456e8 v11.1.2

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump next from 10.2.3 to 11.1.0
Bumps next from 10.2.3 to 11.1.0.

Release notes

Sourced from next's releases.

v11.1.0

A security team from one of our partners noticed an issue in Next.js that allowed for an open redirect to occur.

Specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site.

In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attacker's domain from a trusted domain.

We recommend upgrading to the latest version of Next.js to improve the overall security of your application.

How to Upgrade

We have released patch versions for both the stable and canary channels of Next.js.

To upgrade run npm install next@latest --save

Impact

Affected: Users of Next.js between 10.0.5 and 10.2.0

Affected: Users of Next.js between 11.0.0 and 11.0.1 using pages/_error.js without getInitialProps

Affected: Users of Next.js between 11.0.0 and 11.0.1 using pages/_error.js and next export

Not affected: Deployments on Vercel (vercel.com) are not affected

Not affected: Deployments with pages/404.js

We recommend everyone to upgrade regardless of whether you can reproduce the issue or not.

How to Assess Impact

If you think sensitive code or data could have been exposed, you can filter logs of affected sites by // (double slash at the start of the url) followed by a domain.

What is Being Done

As Next.js has grown in popularity and usage by enterprises, it has received the attention of security researchers and auditors. We are thankful to Gabriel Benmergui from Robinhood for their investigation and discovery of the original bug and subsequent responsible disclosure.

We've landed a patch that ensures path parsing is handled properly for these paths so that the open redirect can no longer occur.

Regression tests for this attack were added to the security integration test suite

We have notified known Next.js users in advance of this publication.

A public CVE was released.

We encourage responsible disclosure of future reports. Please email us at [email protected]. We are actively monitoring this mailbox.

Release notes

Core Changes

Don't test image domains in test env: #26502

Fix props not updating when changing the locale and keeping hash: #26205

Allow user to override next-image-loader: #26548

Add logging when a custom babelrc is loaded: #26570

... (truncated)

Commits

ce4adfc v11.1.0

092a476 v11.0.2-canary.31

ebb6a30 Revert "Add warning during next build when sharp is missing (#27933)"

52486ce v11.0.2-canary.30

8ac3254 Revert "Next swc publish flow (#27932)"

6014b6e v11.0.2-canary.29

4cd45aa Add rootDir setting to eslint-plugin-next (#27918)

e61ea6f Add manifest check step and add missing items (#27934)

94fc6f0 Next swc publish flow (#27932)

51a2a02 Add warning during next build when sharp is missing (#27933)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump minimist from 1.2.5 to 1.2.6
Bumps minimist from 1.2.5 to 1.2.6.

Commits

7efb22a 1.2.6

ef88b93 security notice for additional prototype pollution issue

c2b9819 isConstructorOrProto adapted from PR

bc8ecee test from prototype pollution PR

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump next from 11.1.1 to 12.1.0
Bumps next from 11.1.1 to 12.1.0.

Release notes

Sourced from next's releases.

v12.1.0

Core Changes

Relay Support in Rust Compiler: #33702

fix eslint link-passhref rule: #33857

update webpack: #33831

Flush buffered vitals metrics on page mount: #33867

fix problem with HMR when middleware and page reference the same node_module: #33873

Refactor page component getter in web server: #33759

update NextResponse default redirect status to 307 to match docs: #33505

Bug fix: dynamic page should not be interpreted as predefined page: #33808

Group streaming experimental apis: #33878

Encapsulate routing and initial hydration: #33875

Optimize offline condition judgment: #33238

Ensure external beforeFiles rewrites are handled with next/link: #33888

Fix parsing params for i18n optional route in minimal mode: #33896

Ensure browserslist extends works properly: #33890

Fix image cache race condition: #33883

Add support for Relay projects without artifactDirectory: #33918

fix: handle jsxspreadattribute in inline-script-id eslint rule: #32421

feat(next-swc): Update swc: #33724

Update to latest version of amphtml-validator: #33967

Warn in dev mode when script tags are added with next/head: #33968

Ensure optional chaining in swc matches babel: #33995

Use react-dom/server.browser in Node.js: #33950

Ensure external middleware rewrite is handled correctly: #33962

Update Terser to v5.10.0, fix minification issues: #33045

Warn in dev mode when stylesheets are added using next/head: #34004

Use ReadableStream in RenderResult: #34005

Fix suffix ordering while streaming: #34011

Don't use yarn if a package-lock.json file is found: #31926

Do not warn when application/ld+json scripts are used with next/head: #34021

Babel & next-swc: Fix exporting page config with AsExpression: #32702

Detect per page runtime config for functions manifest: #33945

Add JSDoc to config options: #32915

Update font-stylesheet-gathering-plugin.ts: #30709

Add decoratorMetadata flag if enabled by tsconfig: #32914

fix: data url handling in css-loader: #34034

Place 'charset' element at the top of : #28119

Fix detection of anchor click events inside svg: #23272

Allow passing nothing as custom jest config: #32328

Fixes #31240: Adding a recursive addPackagePath function in webpack-config: #31264

Require component rendered as child of Link to pass event to onClick handler: #27723

Allow scroll prevention on hash change: #31921

Add support for async fn / promise in next.config.js/.mjs: #33662

Fix lazyRoot functionality for next/image: #33933

Change SWC minify from beta to release candidate: #34056

Make Router state immutable: #33925

Stop exposing internal render and renderError methods from next/client: #34069

Add api-utils helper for testing: #34078

... (truncated)

Commits

8545fd1 v12.1.0

1605f30 v12.0.11-canary.21

69aedbd Fix typo (#34480)

f0f322c Remove deprecation for relative URL usage in middlewares (#34461)

d4d79b2 Fix chunk buffering for server components (#34474)

74fa4d4 update webpack (#34477)

b70397e Revert "Allow reading request bodies in middlewares (#34294)" (#34479)

4202011 Update font-optimization test snapshot (#34478)

1edd851 Allow reading request bodies in middlewares (#34294)

ba78437 fix: don't wrap profile in firebase example (#34457)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump follow-redirects from 1.14.0 to 1.14.8
Bumps follow-redirects from 1.14.0 to 1.14.8.

Commits

3d81dc3 Release version 1.14.8 of the npm package.

62e546a Drop confidential headers across schemes.

2ede36d Release version 1.14.7 of the npm package.

8b347cb Drop Cookie header across domains.

6f5029a Release version 1.14.6 of the npm package.

af706be Ignore null headers.

d01ab7a Release version 1.14.5 of the npm package.

40052ea Make compatible with Node 17.

86f7572 Fix: clear internal timer on request abort to avoid leakage

2e1eaf0 Keep Authorization header on subdomain redirects.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump axios from 0.21.1 to 0.21.2
Bumps axios from 0.21.1 to 0.21.2.

Release notes

Sourced from axios's releases.

v0.21.2

0.21.2 (September 4, 2021)

Fixes and Functionality:

Updating axios requests to be delayed by pre-emptive promise creation (#2702)

Adding "synchronous" and "runWhen" options to interceptors api (#2702)

Updating of transformResponse (#3377)

Adding ability to omit User-Agent header (#3703)

Adding multiple JSON improvements (#3688, #3763)

Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)

Adding parseInt to config.timeout (#3781)

Adding custom return type support to interceptor (#3783)

Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

Updating build dev dependancies (#3401)

Fixing builds running on Travis CI (#3538)

Updating follow rediect version (#3694, #3771)

Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)

Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)

Fixing tests by bumping karma-sauce-launcher version (#3813)

Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)

Remove duplication of item in changelog (#3523)

Fixing gramatical errors (#2642)

Fixing spelling error (#3567)

Moving gitpod metion (#2637)

Adding new axios documentation website link (#3681, #3707)

Updating documentation around dispatching requests (#3772)

Adding documentation for the type guard isAxiosError (#3767)

Adding explanation of cancel token (#3803)

Updating CI status badge (#3953)

Fixing errors with JSON documentation (#3936)

Fixing README typo under Request Config (#3825)

Adding axios-multi-api to the ecosystem file (#3817)

Adding SECURITY.md to properly disclose security vulnerabilities (#3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Sasha Korotkov

Daniel Lopretto

Mike Bishop

Dmitriy Mozgovoy

Mark

Philipe Gouveia Paixão

... (truncated)

Changelog

Sourced from axios's changelog.

0.21.2 (September 4, 2021)

Fixes and Functionality:

Updating axios requests to be delayed by pre-emptive promise creation (#2702)

Adding "synchronous" and "runWhen" options to interceptors api (#2702)

Updating of transformResponse (#3377)

Adding ability to omit User-Agent header (#3703)

Adding multiple JSON improvements (#3688, #3763)

Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)

Adding parseInt to config.timeout (#3781)

Adding custom return type support to interceptor (#3783)

Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

Updating build dev dependancies (#3401)

Fixing builds running on Travis CI (#3538)

Updating follow rediect version (#3694, #3771)

Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)

Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)

Fixing tests by bumping karma-sauce-launcher version (#3813)

Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)

Remove duplication of item in changelog (#3523)

Fixing gramatical errors (#2642)

Fixing spelling error (#3567)

Moving gitpod metion (#2637)

Adding new axios documentation website link (#3681, #3707)

Updating documentation around dispatching requests (#3772)

Adding documentation for the type guard isAxiosError (#3767)

Adding explanation of cancel token (#3803)

Updating CI status badge (#3953)

Fixing errors with JSON documentation (#3936)

Fixing README typo under Request Config (#3825)

Adding axios-multi-api to the ecosystem file (#3817)

Adding SECURITY.md to properly disclose security vulnerabilities (#3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Jay

Sasha Korotkov

Daniel Lopretto

Mike Bishop

Dmitriy Mozgovoy

Mark

Philipe Gouveia Paixão

... (truncated)

Commits

c0c8761 [Updating] changelog to include links to issues and contributors

619bb46 [Releasing] v0.21.2

82c9455 Create SECURITY.md (#3981)

5b45711 Security fix for ReDoS (#3980)

5bc9ea2 Update ECOSYSTEM.md (#3817)

e72813a Fixing README.md (#3818)

e10a027 Fix README typo under Request Config (#3825)

e091491 Update README.md (#3936)

b42fbad Removed un-needed bracket

520c8dc Updating CI status badge (#3953)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump next from 10.2.3 to 11.1.1
Bumps next from 10.2.3 to 11.1.1.

Release notes

Sourced from next's releases.

v11.1.1

Core Changes

Next.js swc publish flow: #27984

Ensure config file message is only shown once: #28017

Add missing fields to NextConfig type: #27974

use a shared worker pool for collecting page data and static page generation: #27924

Use @next scope for native packages: #28046

Fix generateBuildId type that can be async function: #28040

Fix image optimization encoding url: #28045

Clean up Document in preparation for streaming: #28032

Render as a concatenation of streams: #28082

Add support for dynamic HTML: #28085

Support suspense in next dynamic: #27611

Handle blob urls in image component: #27975

Bypass webpack compilation for precompiled @next/polyfills-nomodule: #27596

Update util to 0.12.4: #27939

Remove duplicate doctypes: #28089

Fix revalidate for initial notFound: true paths: #28097

Add proper error when failing to load next.config.js: #28099

Fix: wrong link error message: #28127

Add support for Jaeger trace target: #28129

Enable pure client suspense in blocking rendering: #28165

Add entrypoint tracing: #25538

Add module type to build-module trace: #28128

Update to latest babel versions: #28174

Improve jaeger traces: #28168

fix development mode bug with pages with "+" and other special characters: #28122

let loaders automatically infer source map setting: #28204

Avoid fs write next-env.d.ts on read-only filesystems: #28206

Document usage of suspense option of next/dynamic: #28210

Add warning when parent styles break next/image: #28221

Use zen-observable library: #28214

Fix HMR when custom _app or _document is removed: #28227

Add relationship between issuer and module to traces: #28192

Update generating next-server dependencies: #28223

Fix next/image blur placeholder when JS is disabled: #28269

Ensure adding _app/_document HMRs correctly: #28279

upgrade webpack to 5.51.1: #28291

[ESLint] Adds process.exit to next lint success output: #28299

Fix next env vars injection in dynamic: #28309

Add layout to data-nimg attribute: #28312

Add data attribute to script component: #28310

Ensure @babel/core is de-duped when nccing: #28384

Fix forked NODE_OPTIONS except for inspect: #28420

[ESLint] Enable caching by default: #28349

Update test config to leverage swc: #28400

Add missing typescript property to NextConfig: #28459

next/script fix duplicate scripts : #28428

Ensure error is shown correctly for empty headers field: #28430

... (truncated)

Commits

804971f v11.1.1

194d70f v11.1.1-canary.19

36d922f Add apiVersion to config (#28610)

a60690f v11.1.1-canary.18

7afc97c Add CSP to Image Optimization API (#28620)

8711c5c Tests: Remove unnecessary await (#28594)

d209435 Small grammar fixes (#28590)

04cc37f Add docs for using pageExtensions to colocate other files with page component...

f1dbc92 Ensure dev server side errors are correct (#28520)

27c2937 Update with-jest packages and docs (#28209)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump jsonwebtoken from 8.5.1 to 9.0.0
Bumps jsonwebtoken from 8.5.1 to 9.0.0.

Changelog

Sourced from jsonwebtoken's changelog.

9.0.0 - 2022-12-21

Breaking changes: See Migration from v8 to v9

Breaking changes

Removed support for Node versions 11 and below.

The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16)

RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6)

Key types must be valid for the signing / verification algorithm

Security fixes

security: fixes Arbitrary File Write via verify function - CVE-2022-23529

security: fixes Insecure default algorithm in jwt.verify() could lead to signature validation bypass - CVE-2022-23540

security: fixes Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - CVE-2022-23541

security: fixes Unrestricted key type could lead to legacy keys usage - CVE-2022-23539

Commits

e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33

5eaedbf chore(ci): remove github test actions job (#861)

cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)

ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...

8345030 fix(sign&verify)!: Remove default none support from sign and verify met...

7e6a86b Upload OpsLevel YAML (#849)

74d5719 docs: update references vercel/ms references (#770)

d71e383 docs: document "invalid token" error

3765003 docs: fix spelling in README.md: Peak -> Peek (#754)

a46097e docs: make decode impossible to discover before verify

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump minimatch from 3.0.4 to 3.1.2
Bumps minimatch from 3.0.4 to 3.1.2.

Commits

699c459 3.1.2

2f2b5ff fix: trim pattern

25d7c0d 3.1.1

55dda29 fix: treat nocase:true as always having magic

5e1fb8d 3.1.0

f8145c5 Add 'allowWindowsEscape' option

570e8b1 add publishConfig for v3 publishes

5b7cd33 3.0.6

20b4b56 [fix] revert all breaking syntax changes

2ff0388 document, expose, and test 'partial:true' option

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump path-parse from 1.0.6 to 1.0.7
Bumps path-parse from 1.0.6 to 1.0.7.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump node-fetch from 2.6.1 to 2.6.7
Bumps node-fetch from 2.6.1 to 2.6.7.

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

v2.6.6

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json

Commits

1ef4b56 backport of #1449 (#1453)

8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)

f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...

b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)

18193c5 fix v2.6.3 that did not sending query params (#1301)

ace7536 fix: properly encode url with unicode characters (#1291)

152214c Fix(package.json): Corrected main file path in package.json (#1274)

See full diff in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump tar from 6.1.0 to 6.1.11
Bumps tar from 6.1.0 to 6.1.11.

Commits

e573aee 6.1.11

edb8e9a fix: perf regression on hot string munging path

a9d9b05 chore(test): Avoid spurious failures packing node_modules/.cache

24b8bda fix(test): use posix path for testing path reservations

e5a223c fix(test): make unpack test pass on case-sensitive fs

188badd 6.1.10

23312ce drop dirCache for symlink on all platforms

4f1f4a2 6.1.9

875a37e fix: prevent path escape using drive-relative paths

b6162c7 fix: reserve paths properly for unicode, windows

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0