:zap: RAN! React . GraphQL . Next.js Toolkit :zap: - SEO-Ready, Production-Ready, SSR, Hot-Reload, CSS-in-JS, Caching, CLI commands and more...

Ilker Guller

Last update: Jan 3, 2023

Overview

RAN : React . GraphQL . Next.js Toolkit

New version is coming... Follow up here: https://github.com/Sly777/ran/issues/677

Features

Hot-Reload Ready for Dev
Next Generation JavaScript (ES6)
Offline Ready (Experimental!)
Next Generation CSS (CSS-in-JS)
Create New Page in a Second (with CLI)
SEO-Ready
Performance-first
Production Deployment Ready for Now, Digital Ocean, Heroku, and AWS
Prettier and ESLint integrated

How to use

Firstly, clone the repo with this command.

git clone --depth=1 https://github.com/Sly777/ran.git RAN
cd RAN
yarn && yarn setup

If you are not using Yarn, just run npm install && npm run setup instead of yarn && yarn setup
After everything is finished, run yarn dev (or npm run dev)

And that's all!

Start coding on browser! (via Glitch)

Just click the button and then start to work with RAN!

Clean Setup (without example pages & components)

git clone --depth=1 https://github.com/Sly777/ran.git RAN
cd RAN
yarn && yarn setup:clean

Beta Version (Unstable)

Also, there is a beta version for new features & fixes that we are testing before release. To access beta;

git clone --depth=1 -b beta https://github.com/Sly777/ran.git RAN_beta
cd RAN_beta
yarn && yarn setup

It can be unstable, so that's why please use stable version if you are working on the project that is in production.

Example

Click here to see example project to understand how RAN! works on production. I used graph.cool service for GraphQL and now for hosting in the example.

Commands

Best feature of RAN! is CL commands. You can just run one command to create page with route! Click here to see details how It works on RAN!.

Documentation

Click here to see all details of RAN!

FAQ

Click here for FAQ of RAN! If it doesn't solve your problem, feel free to open an issue on GitHub!

License

Contributing

Please read Contributing doc for details on our code of conduct, and the process for submitting pull requests.

Versioning

RAN! is using SemVer for versioning. For the versions available, see the tags on this repository.

Author

Ilker Guller - website / twitter

Contributors

Thanks goes to these wonderful people:

Backers

Thank you to all our backers! [Become a backer]

App Showcase

[WIP]

Comments

Update flow-bin to the latest version 🚀

The devDependency flow-bin was updated from 0.89.0 to 0.90.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Find out more about this release.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 49
Update eslint-plugin-flowtype to the latest version 🚀
The devDependency eslint-plugin-flowtype was updated from 3.2.0 to 3.2.1.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Release Notes for v3.2.1

3.2.1 (2019-01-08)

Bug Fixes

modify require-return-type about annotateUndefined (#355) (a405931)

Commits

The new version differs by 3 commits.

a405931 fix: modify require-return-type about annotateUndefined (#355)

ae28b63 docs: describe a way to install all dependencies at once (#380)

ba353a0 chore: add .editorconfig

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper
opened by greenkeeper[bot] 45
Update lint-staged to the latest version 🚀
The devDependency lint-staged was updated from 8.1.0 to 8.1.4.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Release Notes for v8.1.4

8.1.4 (2019-02-14)

Bug Fixes

Use lodash version with prototype pollution fix (#578) (0be88a0)

Commits

The new version differs by 13 commits.

0be88a0 fix: Use lodash version with prototype pollution fix (#578)

138fbc7 docs: Update Node version in the documentation (#579)

f9e5d7b refactor: Use micromatch ignore option instead of patterns with negations

6e32188 chore: Update yarn.lock

f5bed7b fix: Display package name when node-please-upgrade is being used (#575)

8c4d9c9 fix: Avoid stashing if no staged files has been changed (#570) (#573)

d5e738d fix: Fix configuration validation and allow specifying custom renderers (#572)

406a0c0 chore: Revert "chore: pin cosmiconfig to 5.0.6" (#571)

adfc1d4 docs(readme): Add example for environment variables (#564)

73e04d7 chore: Use unmock to get rid of mock hoisting (#563)

ac8cdf1 docs: Remove comment about hunks support (#553)

352ab8c docs: Update for JetBrains support (#552)

30576d6 chore: Upgrade semantic-release to latest (#548)

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper
opened by greenkeeper[bot] 44
Update next to the latest version 🚀
The dependency next was updated from 7.0.2 to 7.0.3.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Release Notes for 7.0.3

Patches

Bring in terser-webpack-plugin (backport #6231 to master): #6232

Commits

The new version differs by 9 commits.

c07e27f 7.0.3

7c64336 Revert "should not change method to replaceState unless asPath is the same (#6033)"

155423f Bring in terser-webpack-plugin (backport #6231 to master) (#6232)

ab46c45 should not change method to replaceState unless asPath is the same (#6033)

f7477a9 Adding is @tailwind components; (#5897)

cd1d364 Improve with-sentry example (#5727)

c867b0c Fix paths when built on windows (#5795)

c43975a Use more recent version of svg plugin (#5788)

ae8a49f fix typo (#5451)

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper
opened by greenkeeper[bot] 36
Update husky to the latest version 🚀

The devDependency husky was updated from 1.3.1 to 2.0.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Find out more about this release.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 31
Update handlebars to the latest version 🚀

The devDependency handlebars was updated from 4.0.12 to 4.1.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Find out more about this release.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 26
Update react-apollo to the latest version 🚀

Version 2.0.0 of react-apollo was just published.

Dependency react-apollo

Current Version 1.4.16

Type dependency

The version 2.0.0 is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

It might be worth looking into these changes and trying to get this project onto the latest version of react-apollo.

If you have a solid test suite and good coverage, a passing build is a strong indicator that you can take advantage of these changes directly by merging the proposed change into your project. If the build fails or you don’t have such unconditional trust in your tests, this branch is a great starting point for you to work on the update.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 23
Update eslint to the latest version 🚀
The devDependency eslint was updated from 5.11.1 to 5.14.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Release Notes for v5.14.0

85a04b3 Fix: adds conditional for separateRequires in one-var (fixes #10179) (#10980) (Scott Stern)

0c02932 Upgrade: [email protected] (#11401) (Ilya Volodin)

104ae88 Docs: Update governance doc with reviewers status (#11399) (Nicholas C. Zakas)

ab8ac6a Fix: Support boundary spread elements in sort-keys (#11158) (Jakub Rożek)

a23d197 New: add allowSingleLineBlocks opt. to padded-blocks rule (fixes #7145) (#11243) (richie3366)

e25e7aa Fix: comma-spacing ignore comma before closing paren (fixes #11295) (#11374) (Pig Fang)

a1f7c44 Docs: fix space-before-blocks correct code for "classes": "never" (#11391) (PoziWorld)

14f58a2 Docs: fix grammar in object-curly-spacing docs (#11389) (PoziWorld)

d3e9a27 Docs: fix grammar in “those who says” (#11390) (PoziWorld)

ea8e804 Docs: Add note about support for object spread (fixes #11136) (#11395) (Steven Thomas)

95aa3fd Docs: Update README team and sponsors (ESLint Jenkins)

51c4972 Update: Behavior of --init (fixes #11105) (#11332) (Nicholas C. Zakas)

ad7a380 Docs: Update README team and sponsors (ESLint Jenkins)

550de1e Update: use default keyword in JSON schema (fixes #9929) (#11288) (Pig Fang)

983c520 Update: Use 'readonly' and 'writable' for globals (fixes #11359) (#11384) (Nicholas C. Zakas)

f1d3a7e Upgrade: some deps (fixes #11372) (#11373) (薛定谔的猫)

3e0c417 Docs: Fix grammar in “there’s nothing prevent you” (#11385) (PoziWorld)

de988bc Docs: Fix grammar: Spacing improve -> Spacing improves (#11386) (PoziWorld)

1309dfd Revert "Build: fix test failure on Node 11 (#11100)" (#11375) (薛定谔的猫)

1e56897 Docs: “the function actually use”: use -> uses (#11380) (PoziWorld)

5a71bc9 Docs: Update README team and sponsors (ESLint Jenkins)

82a58ce Docs: Update README team and sponsors (ESLint Jenkins)

546d355 Docs: Update README with latest sponsors/team data (#11378) (Nicholas C. Zakas)

c0df9fe Docs: ... is not an operator (#11232) (Felix Kling)

7ecfdef Docs: update typescript parser (refs #11368) (#11369) (薛定谔的猫)

3c90dd7 Update: remove prefer-spread autofix (fixes #11330) (#11365) (薛定谔的猫)

5eb3121 Update: add fixer for prefer-destructuring (fixes #11151) (#11301) (golopot)

173eb38 Docs: Clarify ecmaVersion doesn't imply globals (refs #9812) (#11364) (Keith Maxwell)

84ce72f Fix: Remove extraneous linefeeds in one-var fixer (fixes #10741) (#10955) (st-sloth)

389362a Docs: clarify motivation for no-prototype-builtins (#11356) (Teddy Katz)

533d240 Update: no-shadow-restricted-names lets unassigned vars shadow undefined (#11341) (Teddy Katz)

d0e823a Update: Make --init run js config files through linter (fixes #9947) (#11337) (Brian Kurek)

92fc2f4 Fix: CircularJSON dependency warning (fixes #11052) (#11314) (Terry)

4dd19a3 Docs: mention 'prefer-spread' in docs of 'no-useless-call' (#11348) (Klaus Meinhardt)

4fd83d5 Docs: fix a misleading example in one-var (#11350) (薛定谔的猫)

9441ce7 Chore: update incorrect tests to fix build failing (#11354) (薛定谔的猫)

Commits

The new version differs by 70 commits.

af9688b 5.14.0

0ce3ac7 Build: changelog update for 5.14.0

85a04b3 Fix: adds conditional for separateRequires in one-var (fixes #10179) (#10980)

0c02932 Upgrade: [email protected] (#11401)

104ae88 Docs: Update governance doc with reviewers status (#11399)

ab8ac6a Fix: Support boundary spread elements in sort-keys (#11158)

a23d197 New: add allowSingleLineBlocks opt. to padded-blocks rule (fixes #7145) (#11243)

e25e7aa Fix: comma-spacing ignore comma before closing paren (fixes #11295) (#11374)

a1f7c44 Docs: fix space-before-blocks correct code for "classes": "never" (#11391)

14f58a2 Docs: fix grammar in object-curly-spacing docs (#11389)

d3e9a27 Docs: fix grammar in “those who says” (#11390)

ea8e804 Docs: Add note about support for object spread (fixes #11136) (#11395)

95aa3fd Docs: Update README team and sponsors

51c4972 Update: Behavior of --init (fixes #11105) (#11332)

ad7a380 Docs: Update README team and sponsors

There are 70 commits in total.

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper
opened by greenkeeper[bot] 21
Update eslint-config-prettier to the latest version 🚀

The devDependency eslint-config-prettier was updated from 3.3.0 to 3.4.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Find out more about this release.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 19
Update graphql-cli to the latest version 🚀
Version 2.2.1 of graphql-cli was just published.

Dependency graphql-cli

Current Version 2.2.0

Type devDependency

The version 2.2.1 is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

It might be worth looking into these changes and trying to get this project onto the latest version of graphql-cli.

If you have a solid test suite and good coverage, a passing build is a strong indicator that you can take advantage of these changes directly by merging the proposed change into your project. If the build fails or you don’t have such unconditional trust in your tests, this branch is a great starting point for you to work on the update.

Release Notes
v2.2.1

2.2.1 (2017-12-29)

Bug Fixes

deps: update dependency graphql-config to v1.1.4 (7b23def)

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper
opened by greenkeeper[bot] 17
Update react-apollo to the latest version 🚀

The dependency react-apollo was updated from 2.3.3 to 2.5.0.

This version is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

Find out more about this release.

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Your Greenkeeper bot :palm_tree:
greenkeeper

opened by greenkeeper[bot] 16
[Snyk] Security upgrade next from 7.0.2 to 12.0.9
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

package.json

yarn.lock

Vulnerabilities that will be fixed

With an upgrade:

Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- | 713/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4 | Prototype Pollution
SNYK-JS-JSON5-3182856 | Yes | Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
opened by Sly777 0
chore(deps): bump express from 4.16.4 to 4.17.3
Bumps express from 4.16.4 to 4.17.3.

Release notes

Sourced from express's releases.

4.17.3

deps: accepts@~1.3.8

deps: mime-types@~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: proxy-addr@~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1

Revert "Improve error message for null/undefined to res.status"

4.17.0

Add express.raw to parse bodies into Buffer

Add express.text to parse bodies into string

... (truncated)

Changelog

Sourced from express's changelog.

4.17.3 / 2022-02-16

deps: accepts@~1.3.8

deps: mime-types@~2.1.34

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

pref: remove unnecessary regexp for trust proxy

4.17.2 / 2021-12-16

Fix handling of undefined in res.jsonp

Fix handling of undefined when "json escape" is enabled

Fix incorrect middleware execution with unanchored RegExps

Fix res.jsonp(obj, status) deprecation message

Fix typo in res.is JSDoc

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

deps: [email protected]

deps: [email protected]

deps: [email protected]

Fix maxAge option to reject invalid values

deps: proxy-addr@~2.0.7

Use req.socket over deprecated req.connection

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

pref: ignore empty http tokens

deps: [email protected]

deps: [email protected]

deps: [email protected]

4.17.1 / 2019-05-25

... (truncated)

Commits

3d7fce5 4.17.3

f906371 build: update example dependencies

6381bc6 deps: [email protected]

a007863 deps: [email protected]

e98f584 Revert "build: use [email protected] for Node.js < 4"

a659137 tests: use strict mode

a39e409 tests: prevent leaking changes to NODE_ENV

82de4de examples: fix path traversal in downloads example

12310c5 build: use nyc for test coverage

884657d examples: remove bitwise syntax for includes check

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
[Snyk] Security upgrade next from 7.0.2 to 12.0.9
Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

package.json

yarn.lock

Vulnerabilities that will be fixed

With an upgrade:

Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- | 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992 | Yes | No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
opened by snyk-bot 0
[Snyk] Security upgrade next from 7.0.2 to 12.0.9
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

package.json

yarn.lock

Vulnerabilities that will be fixed

With an upgrade:

Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- | 551/1000
Why? Recently disclosed, Has a fix available, CVSS 5.3 | Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943 | Yes | No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
opened by Sly777 0
[Snyk] Security upgrade next from 7.0.2 to 12.0.9
Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

package.json

yarn.lock

Vulnerabilities that will be fixed

With an upgrade:

Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- | 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5 | Prototype Pollution
SNYK-JS-LOADERUTILS-3043105 | Yes | No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
opened by snyk-bot 0

Dependency	react-apollo
Current Version	1.4.16
Type	dependency

Dependency	graphql-cli
Current Version	2.2.0
Type	devDependency

Releases(0.9.0)

0.9.0(Jan 3, 2019)

Source code(tar.gz)
Source code(zip)
0.8.6(Aug 29, 2018)
Package updates

Updated components for supporting the new version of styled-components (Info: https://github.com/styled-components/styled-components/issues/1546)

Source code(tar.gz)
Source code(zip)
0.8.5(Jul 16, 2018)
Package updates

Static export bug fixes (thanks @davidsanchez96)

Flow & Next.js version conflict bug fixed

Updated URL props with new next.js router system

Source code(tar.gz)
Source code(zip)
0.8.3(Apr 5, 2018)
RAN! 0.8.3

🔥 Glitch support 🔥 Just click this button to start with RAN!

set node.js 8 on engines setting (still works with node.js 9)

removed PM2 (but I added new command for this ✌️)

Updated documentation

Added prestart script to build the app before the start

Source code(tar.gz)
Source code(zip)
0.8.2(Apr 5, 2018)

Source code(tar.gz)
Source code(zip)
0.8.1(Apr 5, 2018)
package updates

removed node.js 7 support

Added node.js 9 support

Source code(tar.gz)
Source code(zip)
0.8.0(Jan 20, 2018)
RAN 0.8.0

Finally, New version of RAN is ready! In this release, Most important things are that we added type checking (with Flow) and shared environment variables. Also; we fixed some bugs and, as usual, updated packages.

Thanks to @talensjr, @baires, @evenchange4, @aarondancer and @mrsteele for all help!

🔥 Breaking Changes 🔥

Added Type checking with Flow (thanks to @talensjr). By the way, It's optional so if you don't use @flow flag on your any js files, It will not check.

Added Shared Environment Support (thanks to @mrsteele). That means you can share your environment variables between client and server. If you use public.env file before this update, please check your security because we are using public.env File for sharing variables. Please check the documentation for details.

Other Changes

Added Opencollective

Added .prettierrc

Fixes on documentation (thanks to @aarondancer and @baires)

Updated cache time bug (thanks to @evenchange4)

a lot of package updates (not major ones so these updates shouldn't break your system)

Source code(tar.gz)
Source code(zip)
0.7.1(Oct 27, 2017)

Hey all, on this small update, I updated links on documentation which is now available on https://www.rantoolkit.com, Also I updated page design and added small info for writers on the example page :)
Source code(tar.gz)
Source code(zip)
0.7.0(Oct 26, 2017)
RAN 0.7.0

Welcome to the new version of RAN! On this version, RAN has too many new features such as new commands for creating components and containers, exporting static html easily, start project cleanest way and more. I hope you like it! If you have any question/issue/opinion/wish, Don't hesitate to contact me!

🔥 Breaking Changes 🔥

Static HTML export support. You don't need to think about routes, pages. Everything is prepared for you with new Next.js version and RAN commands.

New commands: (for details; please check Docs/Commands)

create:component for creating new fancy components easily

create:container for creating container for your pages

setup:clean for setup your application without any example page and component

build:static_export for building your application and exporting to HTML

Added node_version and nvmrc files for standard of node.js version for everyone of your project

Other Changes

Documentation updated

Changed next-cookies repo address for static export

Package Updates

chalk to 2.3.0

moment to 2.19.1

styled-components to 2.2.2

next to 4.1.3

eslint-plugin-import to 2.8.0

lint-staged to 4.3.0

pm2 to 2.7.2

handlebars to 4.0.11

Source code(tar.gz)
Source code(zip)
0.6.2(Oct 16, 2017)
Package Updates

next-routes to version 1.1.0

babel-plugin-inline-import-graphql-ast to version 2.0.2

next to version 4.1.0

Eslint-config-airbnb to version 16.0.0

eslint-plugin-jsx-a11y to version 6.0.2

eslint to version 4.9.0

ngrok to version 2.2.23

eslint-watch to version 3.1.3

helmet to version 3.9.0

Express to version 4.16.2

Source code(tar.gz)
Source code(zip)
0.6.1(Oct 4, 2017)
Small Changes

Fixed graphql linter bug because of the graphql package changes

Updated .graphqlconfig and schema path

Added Graphcool Schema

Updated Graphql URLs

Package Updates

update styled-components to version 2.2.1

update eslint-plugin-graphql to version 1.4.0-1

update babel-plugin-styled-components to version 1.2.1

update prettier to version 1.7.4

Updated express to 4.16.1

update graphql-cli to version 1.1.0

update eslint to version 4.8.0

update helmet to version 3.8.2

update release to version 2.5.2

update compression to version 1.7.1

update react-apollo to version 1.4.16

update babel-eslint to version 8.0.1

update react-dom to version 15.6.2

update react to version 15.6.2

update prop-types to version 15.6.0

update lint-staged to version 4.2.3

update eslint-plugin-react to version 7.4.0

update babel-plugin-inline-import-graphql-ast to version 2.0.1

update offline-plugin to version 4.8.4

update eslint-config-prettier to version 2.6.0

update pm2 to version 2.7.1

update inquirer to version 3.3.0

update replace-in-file to version 3.0.0-beta.2

update next to version 3.2.2

update ngrok to version 2.2.22

Source code(tar.gz)
Source code(zip)
0.6.0(Aug 29, 2017)
RAN 0.6.0

Welcome to the new version of RAN! On this version, I added Cluster mode for increased performance, added PM2 for process management, Upgraded Prettier to new fancy version 1.6 and also made RAN! logo. As you see, I tried to make logo between next.js and graphQL so I hope you like it! 😃 If you have any question/issue/opinion/wish, Don't hesitate to contact me!

Breaking Changes

Added PM2 and Cluster mode. Basically, Everything is same but not on the background. It will start to give more information to understand what's going on your machine.

Upgraded Prettier to 1.6. I updated my code with this but It can fix on your changes automatically after run lint. So don't worry, It's going great :)

Added App Icons and Favicon. If you are using RAN on your production, don't forget to change them with your icons.

Added Contributor List using by all-contributors.

Changes

Added new helper for commands: addTexttoFile

Updated create:page & create:route

Now new route after create page or route will be added automatically to ./routes.js

Removed "RAN! Example" from title on create page command

Updated Message on create page command

Fixed gql file cache bug

🔥 Added PM2 for process manager 🔥

🔥 Added cluster mode for increase performace 🔥

Updated start and start:next commands with PM2

Added App Icons and Favicon

Created new component for App Icons

Added Doc for Static files and App Icons

🔥 Added RAN! Logo 🔥

Updated server.js and document.js

Added Contributor List using by all-contributors.

Removed unnecessary packages

Code Style fixes after upgrade to Prettier 1.6

[Fix] #115 #126

[Feature] #116

Package Upgrades

react-helmet to version 5.2.0

prettier to version 1.6.1

babel-plugin-styled-components to version 1.2.0

release to version 2.1.0

next-cookies to version 1.0.2

react-apollo to version 1.4.15

ngrok to version 2.2.21

lint-staged to version 4.0.4

graphql-cli to version 1.0.1

eslint-plugin-react to version 7.3.0

inquirer to version 3.2.2

next to version 3.0.6

eslint-plugin-prettier to version 2.2.0

Source code(tar.gz)
Source code(zip)
0.5.0(Aug 15, 2017)
RAN 0.5.0

Firstly, Thanks to everyone for suggestions and bug reports. Especially @BjornMelgaard for making massive work for this release! On 0.5.0, We made big changes on Authentication and File Naming. From now on, data.js files are store.js. And also we took the style codes from components and put them to the new files as styles.js. For the other changes, check below!

Breaking Changes

Updated Auth Architecture

Updated File Naming (by @BjornMelgaard)

Split Styles from Component Files (by @BjornMelgaard)

Updates

Added Auto check for Js files on Development

Added new command: lint:watch

Removed localForage Package

Added Next-Cookies & Js-Cookie Packages

added babel-plugin-inline-import-graphql-ast (by @BjornMelgaard)

added eslint for graphql (by @BjornMelgaard)

Fixed on CLI for route

Fixed Route Changes

Fixed Auth Token Bug

Fixed single quotes on .eslintrc

Fixed Deps bug on Deployment

Updated Packages doc

Package Updates

react-redux to version 5.0.6

next to version 3.0.3

eslint-plugin-react to version 7.2.0

release to version 1.4.0

eslint-plugin-react to version 7.2.1

react-apollo to version 1.4.14

ngrok to version 2.2.17

Source code(tar.gz)
Source code(zip)
0.4.0(Aug 7, 2017)
From now on, RAN! starts to use next-routes for routing because It's more reliable and easier than the old next-url-prettifier.

Other updates

Fixed link to GraphCool (thanks to @lewiscowper)

Updated styled-components -> 2.1.2

Updated webpack-bundle-analyzer -> 2.9.0

Updated release -> 1.3.2

Updated lint-staged -> 4.0.3

Updated chalk -> 2.1.0

Updated cors -> 2.8.4

Updated redux -> 3.7.2

Updated express -> 4.15.4

Source code(tar.gz)
Source code(zip)
0.3.1(Aug 2, 2017)
[feature] new commands graphql:play, graphql:update_schema and graphql:see_graph [feature] Created schema file of example graphql service [feature] .graphqlconfig file for working with graphql easily [feature] Added .env (environment variable) support (thanks @fyalavuz 🎉)

Other Updates

[feature] new packages on DEV: graphql-cli, graphql-cli-voyager

[update] Updated Commands, Environment Variable doc

Packages

react-apollo -> 1.4.8

release -> 1.2.4

helment -> 3.8.1

next.js -> 3.0.1-beta.19

inquirer -> 3.2.1

eslint-config-airbnb -> 15.1.0

eslint-plugin-import -> 2.7.0

eslint-plugin-jsx-a11y -> 5.1.0

Source code(tar.gz)
Source code(zip)
0.3.0(Jul 22, 2017)
Big changes

[New Feature] Authentication system is ready (Thanks @astenmies for great work!) [New Feature] Structures way cleaner now. added containers. [New Feature] Added SNYK and Helmet for better security [New Feature] Added Codeclimate

Other Updates

Added ".yarnclean"

Updated Travis-ci setting

Updated linter for js files in the root directory (Thanks @pronevich)

Added New pages for auth (Sign-up, Sign-in, Sign-out)

Added error states

Added Validations

Packages

react-apollo -> 1.4.8

ngrok -> 2.2.15

next-url-prettifier -> 1.1.5

graphql -> 0.10.5

Lint-stage -> 4.0.2

Prettier -> 1.5.3

Webpack-bundle-analyzer -> 2.8.3

Redux -> 3.7.2

Compression -> 1.7.0

Offline-plugin -> 4.8.3

Inquirer -> 3.2.0

Husky -> 0.14.3

Source code(tar.gz)
Source code(zip)
0.2.5(Jul 4, 2017)

Source code(tar.gz)
Source code(zip)
0.2.4(Jul 2, 2017)

Source code(tar.gz)
Source code(zip)
0.2.3(Jun 30, 2017)

Updated Theme Library Added package for color manipulation: color.js Updated some packages Updated Styling Documentation
Source code(tar.gz)
Source code(zip)
0.2.2(Jun 29, 2017)

Added new command: create:route Updated Next.js version Updated prettier version Updated Doc
Source code(tar.gz)
Source code(zip)
0.2.1(Jun 26, 2017)

On this release, I added offline support as experimental feature on RAN! Updated Redux Added Bundle analyze feature to see what's going on your packages and files.
Source code(tar.gz)
Source code(zip)
0.2.0(Jun 24, 2017)

added create:page command to create page in a second!

updated documentation for new features. updated packages. fixed redux devtools bugs : #8
Source code(tar.gz)
Source code(zip)
0.1.0(Jun 22, 2017)

First Release with Greenkeeper, Travis and Code Climate Support
Source code(tar.gz)
Source code(zip)