Serverless Pre-Rendering Landing Page

Vercel

Last update: Dec 21, 2022

Related tags

Overview

Serverless Pre-Rendering Demo

Read the blog post Checkout the demo

Developing

By default, the content on the site is based off our public Notion page.

To edit and create content through your own Notion page, sign up for Notion, and update the PAGE_ID environment variable with your page ID.

Deploying

More Examples

Notion Blog

Comments

Better source code documentation - Questions about how it works
I've read https://zeit.co/blog/serverless-pre-rendering and I'm interested by SPR, but I don't fully understand how it works.

AFAIU, everything is done there https://github.com/zeit/spr-landing/blob/master/pages/index.js#L177-L180

if (res) { res.setHeader("Cache-Control", "s-maxage=1, stale-while-revalidate"); res.setHeader("X-version", etag); }

Few questions:

What's the goal of X-version here? What happens if I don't define it?

How does this cache implementation works? I don't understand how defining a 1s cache can change anything performance-wise.

Basically, considering I have a Next.js app which does SSR (fetching content from a headless CMS in _app:getInitialProps), what would happen if I just add those two lines in _app/getInitialProps?
opened by Vadorequest 4
[WIP] fix: refactor to proxy all Notion endpoints through lambdas
Description

This is a somewhat large refactor of the demo.

Move all notion fetches behind proxy lambdas (need for CORS, image.js already does this).

Make sure that fetching our proxy endpoints has the correct url on dev / prod (now).

Move the logic for getInitialProps out of the data folder (I'm not sure this is necessary but it was producing the "Rules of Hooks" error on client side transitions as described in the issue).

I've tagged as WIP with a few open questions:

I must be missing something about exactly why getInitialProps throws that hooks error.

Is there a cleaner way to do this? (less proxy lambdas, should we just have one express server etc)

What should live in the lambdas vs getInitialProps. Eg. we could make a lambda out of getNotionData basically...

should we be doing any of this before Notion has an official API 😬

Motivation

Mostly https://github.com/zeit/spr-landing/issues/8.

Want the ability to have multiple pages that link together. Current implementation fails on client side transitions due to Notion blocking the browser requests.

I was pretty 😱seeing this demoed in 🇯🇵

Testing

I added a super simple pages/about.js (not in PR) that links back to the original page with next/link. Works both locally and on prod.

I forked the Zeit notion page behind the demo and ensured that the SPR feature still works with the refactor (change title and first image). https://spr-landing.wbunting.now.sh/
opened by wbunting 4
Can it work for multiple pages with Link?

Hi, I try to add Next`s Link to another sample page, but it ends with a weird error about hooks. Even when I commented out hooks

I create a fork with example https://github.com/PetrSnobelt/spr-landing

Should it work with <Link prefetch, or only SSR is supported?

opened by PetrSnobelt 4
"Statically generated websites (...) don't scale beyond a few pages."

Hello !

"Statically generated websites (...) don't scale beyond a few pages."

(from https://spr-landing.zeit.sh/ )

This sentence is misleading : it gives the false impression than "Statically generated websites" can only handle 5 or 20 pages; which is wrong; they can handle, with decent build times, hundreds or thousands of pages.

opened by yann-yinn 4
Q: React Demo

Is there a React SPR demo floating around somewhere? Given this is the example repo for a Next.js version I figure it's the most appropriate place I've seen so far to make a query about the existence of a React one.

opened by tsujp 3
Usage with gatsby

I have a Gastby site deployed with now. Where should these lines be going: res.setHeader("Cache-Control", "s-maxage=1, stale-while-revalidate");?

Or can I only us this feature with NextJS?

https://github.com/zeit/spr-landing/blob/master/pages/index.js#L178-L181

opened by elie222 3
Bump node-fetch from 2.6.1 to 3.1.1
Bumps node-fetch from 2.6.1 to 3.1.1.

Release notes

Sourced from node-fetch's releases.

v3.1.1

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

core: update fetch-blob by @jimmywarting in node-fetch/node-fetch#1371

docs: Fix typo around sending a file by @jimmywarting in node-fetch/node-fetch#1381

core: (http.request): Cast URL to string before sending it to NodeJS core by @jimmywarting in node-fetch/node-fetch#1378

core: handle errors from the request body stream by @mdmitry01 in node-fetch/node-fetch#1392

core: Better handle wrong redirect header in a response by @tasinet in node-fetch/node-fetch#1387

core: Don't use buffer to make a blob by @jimmywarting in node-fetch/node-fetch#1402

docs: update readme for TS @types/node-fetch by @adamellsworth in node-fetch/node-fetch#1405

core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @maxshirshin in node-fetch/node-fetch#1369

core: Don't use global buffer by @jimmywarting in node-fetch/node-fetch#1422

ci: fix main branch by @dnalborczyk in node-fetch/node-fetch#1429

core: use more node: protocol imports by @dnalborczyk in node-fetch/node-fetch#1428

core: Warn when using data by @jimmywarting in node-fetch/node-fetch#1421

docs: Create SECURITY.md by @JamieSlome in node-fetch/node-fetch#1445

core: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1449

New Contributors

@mdmitry01 made their first contribution in node-fetch/node-fetch#1392

@tasinet made their first contribution in node-fetch/node-fetch#1387

@adamellsworth made their first contribution in node-fetch/node-fetch#1405

@maxshirshin made their first contribution in node-fetch/node-fetch#1369

@JamieSlome made their first contribution in node-fetch/node-fetch#1445

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v3.1.0...v3.1.1

v3.1.0

What's Changed

fix(Body): Discourage form-data and buffer() by @jimmywarting in node-fetch/node-fetch#1212

fix: Pass url string to http.request by @serverwentdown in node-fetch/node-fetch#1268

Fix octocat image link by @lakuapik in node-fetch/node-fetch#1281

fix(Body.body): Normalize Body.body into a node:stream by @jimmywarting in node-fetch/node-fetch#924

docs(Headers): Add default Host request header to README.md file by @robertoaceves in node-fetch/node-fetch#1316

Update CHANGELOG.md by @jimmywarting in node-fetch/node-fetch#1292

Add highWaterMark to cloned properties by @davesidious in node-fetch/node-fetch#1162

Update README.md to fix HTTPResponseError by @thedanfernandez in node-fetch/node-fetch#1135

docs: switch url to URL by @dhritzkiv in node-fetch/node-fetch#1318

fix(types): declare buffer() deprecated by @dnalborczyk in node-fetch/node-fetch#1345

chore: fix lint by @dnalborczyk in node-fetch/node-fetch#1348

refactor: use node: prefix for imports by @dnalborczyk in node-fetch/node-fetch#1346

Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @dependabot in node-fetch/node-fetch#1319

Bump mocha from 8.4.0 to 9.1.3 by @dependabot in node-fetch/node-fetch#1339

Referrer and Referrer Policy by @tekwiz in node-fetch/node-fetch#1057

Add typing for Response.redirect(url, status) by @c-w in node-fetch/node-fetch#1169

chore: Correct stuff in README.md by @Jiralite in node-fetch/node-fetch#1361

docs: Improve clarity of "Loading and configuring" by @serverwentdown in node-fetch/node-fetch#1323

feat(Body): Added support for BodyMixin.formData() and constructing bodies with FormData by @jimmywarting in node-fetch/node-fetch#1314

... (truncated)

Changelog

Sourced from node-fetch's changelog.

Changelog

All notable changes will be recorded here.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

What's Changed

core: update fetch-blob by @jimmywarting in node-fetch/node-fetch#1371

docs: Fix typo around sending a file by @jimmywarting in node-fetch/node-fetch#1381

core: (http.request): Cast URL to string before sending it to NodeJS core by @jimmywarting in node-fetch/node-fetch#1378

core: handle errors from the request body stream by @mdmitry01 in node-fetch/node-fetch#1392

core: Better handle wrong redirect header in a response by @tasinet in node-fetch/node-fetch#1387

core: Don't use buffer to make a blob by @jimmywarting in node-fetch/node-fetch#1402

docs: update readme for TS @types/node-fetch by @adamellsworth in node-fetch/node-fetch#1405

core: Fix logical operator priority to disallow GET/HEAD with non-empty body by @maxshirshin in node-fetch/node-fetch#1369

core: Don't use global buffer by @jimmywarting in node-fetch/node-fetch#1422

ci: fix main branch by @dnalborczyk in node-fetch/node-fetch#1429

core: use more node: protocol imports by @dnalborczyk in node-fetch/node-fetch#1428

core: Warn when using data by @jimmywarting in node-fetch/node-fetch#1421

docs: Create SECURITY.md by @JamieSlome in node-fetch/node-fetch#1445

core: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1449

New Contributors

@mdmitry01 made their first contribution in node-fetch/node-fetch#1392

@tasinet made their first contribution in node-fetch/node-fetch#1387

@adamellsworth made their first contribution in node-fetch/node-fetch#1405

@maxshirshin made their first contribution in node-fetch/node-fetch#1369

@JamieSlome made their first contribution in node-fetch/node-fetch#1445

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v3.1.0...v3.1.2

3.1.0

What's Changed

fix(Body): Discourage form-data and buffer() by @jimmywarting in node-fetch/node-fetch#1212

fix: Pass url string to http.request by @serverwentdown in node-fetch/node-fetch#1268

Fix octocat image link by @lakuapik in node-fetch/node-fetch#1281

fix(Body.body): Normalize Body.body into a node:stream by @jimmywarting in node-fetch/node-fetch#924

docs(Headers): Add default Host request header to README.md file by @robertoaceves in node-fetch/node-fetch#1316

Update CHANGELOG.md by @jimmywarting in node-fetch/node-fetch#1292

Add highWaterMark to cloned properties by @davesidious in node-fetch/node-fetch#1162

Update README.md to fix HTTPResponseError by @thedanfernandez in node-fetch/node-fetch#1135

docs: switch url to URL by @dhritzkiv in node-fetch/node-fetch#1318

fix(types): declare buffer() deprecated by @dnalborczyk in node-fetch/node-fetch#1345

chore: fix lint by @dnalborczyk in node-fetch/node-fetch#1348

refactor: use node: prefix for imports by @dnalborczyk in node-fetch/node-fetch#1346

Bump data-uri-to-buffer from 3.0.1 to 4.0.0 by @dependabot in node-fetch/node-fetch#1319

Bump mocha from 8.4.0 to 9.1.3 by @dependabot in node-fetch/node-fetch#1339

Referrer and Referrer Policy by @tekwiz in node-fetch/node-fetch#1057

Add typing for Response.redirect(url, status) by @c-w in node-fetch/node-fetch#1169

... (truncated)

Commits

36e47e8 3.1.1 release (#1451)

5304f3f Don't change relative location header on manual redirect (#1105)

f5d3cf5 fix(Headers): don't forward secure headers to 3th party (#1449)

f2c3d56 Create SECURITY.md (#1445)

4ae3538 core: Warn when using data (#1421)

41f53b9 fix: use more node: protocol imports (#1428)

f674875 ci: fix main branch (#1429)

1493d04 core: Don't use global buffer (#1422)

eb33090 Chore: Fix logical operator priority (regression) to disallow GET/HEAD with n...

7ba5bc9 update readme for TS @type/node-fetch (#1405)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Bump next from 11.1.1 to 11.1.3
Bumps next from 11.1.1 to 11.1.3.

Release notes

Sourced from next's releases.

v11.1.3

See https://github.com/vercel/next.js/releases/v12.0.5 for details about this patch.

v11.1.3-canary.105

Core Changes

Update swc-minify-enabled link: #30290

Fix middleware header propagation: #30288

Move outputFileTracing config up: #30295

Track usage of swc features: #30297

Ensure null bytes in resolved path are handled: #30313

Improve deprecation errors for new middleware API: #30316

Documentation Changes

Add more docs.: #30320

Example Changes

Update image component example to use AVIF: #30294

Credits

Huge thanks to @ijjk, @styfle, @padmaia, @javivelasco, and @leerob for helping!

v11.1.3-canary.104

Misc Changes

Add necessary workflow job dependencies: #30291

v11.1.3-canary.103

Core Changes

Warn when mutating res if not streaming: #30284

Chore/publish all swc: #30289

Credits

Huge thanks to @kara for helping!

v11.1.3-canary.102

Core Changes

Add warning when LCP image is missing priority prop: #30221

New Middleware API signature: #30282

Fix trace case with tsconfig/jsconfig baseUrl: #30286

Documentation Changes

... (truncated)

Commits

ec1a0f7 v11.1.3

4dc9bba Add no-verify-access for lerna

e314019 use correct token

1a40e71 fix lint

b01acc1 Update branch name to next-11

66de88d Use next-11 tag

303bc0f Allow publishing on v11-patch branch

f59c82b Enable GitHub actions for v11-patch branch

4888713 Ensure invalid URLs respond with 400 correctly

97456e8 v11.1.2

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Bump lodash from 4.17.15 to 4.17.21
Bumps lodash from 4.17.15 to 4.17.21.

Commits

f299b52 Bump to v4.17.21

c4847eb Improve performance of toNumber, trim and trimEnd on large input strings

3469357 Prevent command injection through _.template's variable option

ded9bc6 Bump to v4.17.20.

63150ef Documentation fixes.

00f0f62 test.js: Remove trailing comma.

846e434 Temporarily use a custom fork of lodash-cli.

5d046f3 Re-enable Travis tests on 4.17 branch.

aa816b3 Remove /npm-package.

d7fbc52 Bump to v4.17.19

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Bump ssri from 6.0.1 to 6.0.2
Bumps ssri from 6.0.1 to 6.0.2.

Changelog

Sourced from ssri's changelog.

6.0.2 (2021-04-07)

Bug Fixes

backport regex change from 8.0.1 (b30dfdb), closes #19

Commits

b7c8c7c chore(release): 6.0.2

b30dfdb fix: backport regex change from 8.0.1

See full diff in compare view

Maintainer changes

This version was pushed to npm by nlf, a new releaser for ssri since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Bump node-fetch from 2.6.0 to 2.6.1
Bumps node-fetch from 2.6.0 to 2.6.1.

Release notes

Sourced from node-fetch's releases.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

See CHANGELOG for details.

Changelog

Sourced from node-fetch's changelog.

v2.6.1

This is an important security release. It is strongly recommended to update as soon as possible.

Fix: honor the size option after following a redirect.

Commits

b5e2e41 update version number

2358a6c Honor the size option after following a redirect and revert data uri support

8c197f8 docs: Fix typos and grammatical errors in README.md (#686)

1e99050 fix: Change error message thrown with redirect mode set to error (#653)

244e6f6 docs: Show backers in README

6a5d192 fix: Properly parse meta tag when parameters are reversed (#682)

47a24a0 chore: Add opencollective badge

7b13662 chore: Add funding link

5535c2e fix: Check for global.fetch before binding it (#674)

1d5778a docs: Add Discord badge

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Bump node-fetch from 2.6.1 to 2.6.7
Bumps node-fetch from 2.6.1 to 2.6.7.

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

fix: don't forward secure headers to 3th party by @jimmywarting in node-fetch/node-fetch#1453

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7

v2.6.6

What's Changed

fix(URL): prefer built in URL version when available and fallback to whatwg by @jimmywarting in node-fetch/node-fetch#1352

Full Changelog: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6

v2.6.2

fixed main path in package.json

Commits

1ef4b56 backport of #1449 (#1453)

8fe5c4e 2.x: Specify encoding as an optional peer dependency in package.json (#1310)

f56b0c6 fix(URL): prefer built in URL version when available and fallback to whatwg (...

b5417ae fix: import whatwg-url in a way compatible with ESM Node (#1303)

18193c5 fix v2.6.3 that did not sending query params (#1301)

ace7536 fix: properly encode url with unicode characters (#1291)

152214c Fix(package.json): Corrected main file path in package.json (#1274)

See full diff in compare view

Maintainer changes

This version was pushed to npm by endless, a new releaser for node-fetch since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump minimist from 1.2.5 to 1.2.6
Bumps minimist from 1.2.5 to 1.2.6.

Commits

7efb22a 1.2.6

ef88b93 security notice for additional prototype pollution issue

c2b9819 isConstructorOrProto adapted from PR

bc8ecee test from prototype pollution PR

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump next from 11.1.1 to 12.1.0
Bumps next from 11.1.1 to 12.1.0.

Release notes

Sourced from next's releases.

v12.1.0

Core Changes

Relay Support in Rust Compiler: #33702

fix eslint link-passhref rule: #33857

update webpack: #33831

Flush buffered vitals metrics on page mount: #33867

fix problem with HMR when middleware and page reference the same node_module: #33873

Refactor page component getter in web server: #33759

update NextResponse default redirect status to 307 to match docs: #33505

Bug fix: dynamic page should not be interpreted as predefined page: #33808

Group streaming experimental apis: #33878

Encapsulate routing and initial hydration: #33875

Optimize offline condition judgment: #33238

Ensure external beforeFiles rewrites are handled with next/link: #33888

Fix parsing params for i18n optional route in minimal mode: #33896

Ensure browserslist extends works properly: #33890

Fix image cache race condition: #33883

Add support for Relay projects without artifactDirectory: #33918

fix: handle jsxspreadattribute in inline-script-id eslint rule: #32421

feat(next-swc): Update swc: #33724

Update to latest version of amphtml-validator: #33967

Warn in dev mode when script tags are added with next/head: #33968

Ensure optional chaining in swc matches babel: #33995

Use react-dom/server.browser in Node.js: #33950

Ensure external middleware rewrite is handled correctly: #33962

Update Terser to v5.10.0, fix minification issues: #33045

Warn in dev mode when stylesheets are added using next/head: #34004

Use ReadableStream in RenderResult: #34005

Fix suffix ordering while streaming: #34011

Don't use yarn if a package-lock.json file is found: #31926

Do not warn when application/ld+json scripts are used with next/head: #34021

Babel & next-swc: Fix exporting page config with AsExpression: #32702

Detect per page runtime config for functions manifest: #33945

Add JSDoc to config options: #32915

Update font-stylesheet-gathering-plugin.ts: #30709

Add decoratorMetadata flag if enabled by tsconfig: #32914

fix: data url handling in css-loader: #34034

Place 'charset' element at the top of : #28119

Fix detection of anchor click events inside svg: #23272

Allow passing nothing as custom jest config: #32328

Fixes #31240: Adding a recursive addPackagePath function in webpack-config: #31264

Require component rendered as child of Link to pass event to onClick handler: #27723

Allow scroll prevention on hash change: #31921

Add support for async fn / promise in next.config.js/.mjs: #33662

Fix lazyRoot functionality for next/image: #33933

Change SWC minify from beta to release candidate: #34056

Make Router state immutable: #33925

Stop exposing internal render and renderError methods from next/client: #34069

Add api-utils helper for testing: #34078

... (truncated)

Commits

8545fd1 v12.1.0

1605f30 v12.0.11-canary.21

69aedbd Fix typo (#34480)

f0f322c Remove deprecation for relative URL usage in middlewares (#34461)

d4d79b2 Fix chunk buffering for server components (#34474)

74fa4d4 update webpack (#34477)

b70397e Revert "Allow reading request bodies in middlewares (#34294)" (#34479)

4202011 Update font-optimization test snapshot (#34478)

1edd851 Allow reading request bodies in middlewares (#34294)

ba78437 fix: don't wrap profile in firebase example (#34457)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump nanoid from 3.1.25 to 3.2.0
Bumps nanoid from 3.1.25 to 3.2.0.

Changelog

Sourced from nanoid's changelog.

Change Log

This project adheres to Semantic Versioning.

3.2

Added --size and --alphabet arguments to binary (by Vitaly Baev).

3.1.32

Reduced async exports size (by Artyom Arutyunyan).

Moved from Jest to uvu (by Vitaly Baev).

3.1.31

Fixed collision vulnerability on object in size (by Artyom Arutyunyan).

3.1.30

Reduced size for project with brotli compression (by Anton Khlynovskiy).

3.1.29

Reduced npm package size.

3.1.28

Reduced npm package size.

3.1.27

Cleaned dependencies from development tools.

3.1.26

Improved performance (by Eitan Har-Shoshanim).

Reduced npm package size.

Commits

23b1369 Release 3.2 version

967788e Remove TS test tools

27eaa90 Simplify new binary tool

a9d9123 Update dependencies

32b9bda Allows passing size or custom alphabet via cli as args (#334)

246d5f8 Update vite

afdf9c9 doc: Fixed Typo (#335)

90a446f Update benchmark results

8ba2319 bench: add @napi-rs/uuid v4 (#333)

f425778 Release 3.1.32 version

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1