fix(deps): update all non-major depedencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@livekit/components-react (source)	1.5.1 -> 1.5.3					dependencies	patch
@livekit/components-styles (source)	1.0.8 -> 1.0.9					dependencies	patch
@taplo/cli (source)	^0.5.2 -> ^0.7.0					devDependencies	minor
@types/node (source)	20.10.8 -> 20.11.16					devDependencies	minor
@types/react (source)	18.2.47 -> 18.2.54					devDependencies	patch	18.2.55
actix-web (source)	4.4.0 -> 4.5.1					dependencies	minor
anyhow	1.0.75 -> 1.0.79					dependencies	patch
async-channel	2.1.0 -> 2.1.1					dependencies	patch
async-openai	0.18.0 -> 0.18.3					dependencies	patch
async-trait	0.1.74 -> 0.1.77					dependencies	patch
autoprefixer	10.4.16 -> 10.4.17					devDependencies	patch
base64	0.21.5 -> 0.21.7					dependencies	patch
bevy (source)	0.12.0 -> 0.12.1					dependencies	patch
bevy_panorbit_camera	0.10.0 -> 0.11.1					dependencies	minor
bevy_transform_gizmo	0.9.0 -> 0.10.0					dependencies	minor
chrono	0.4.31 -> 0.4.33					dependencies	patch
crossbeam	0.8.2 -> 0.8.4					dependencies	patch
crossbeam-channel (source)	0.5.10 -> 0.5.11					dependencies	patch
dotenv	16.3.1 -> 16.4.1					devDependencies	minor
eslint-config-next (source)	14.0.4 -> 14.1.0					devDependencies	minor
ezsockets	0.6.1 -> 0.6.2					dependencies	patch
futures (source)	0.3.29 -> 0.3.30					dependencies	patch
image	0.24.7 -> 0.24.8					dependencies	patch
lint-staged	15.2.0 -> 15.2.2					devDependencies	patch
livekit-client	1.15.8 -> 1.15.11					dependencies	patch
next (source)	14.0.4 -> 14.1.0					dependencies	minor
node (source)	20.10.0 -> 20.11.0						minor
pnpm (source)	8.7.6 -> 8.15.1					packageManager	minor
prettier (source)	3.1.1 -> 3.2.5					devDependencies	minor
serde (source)	1.0.192 -> 1.0.196					dependencies	patch
serde_json	1.0.108 -> 1.0.113					dependencies	patch
tailwind-merge	2.2.0 -> 2.2.1					dependencies	patch
tokio (source)	1.33.0 -> 1.36.0					dependencies	minor
wgpu (source)	0.17.1 -> 0.19.1					dependencies	minor

---

Release Notes

livekit/components-js (@​livekit/components-react)

v1.5.3

Compare Source

Patch Changes

• Add possibility to edit/update chat messages - #​757 (@​lukasIO)

• Use room as dependency to recreate localParticipant observable - #​753 (@​lukasIO)

• Updated dependencies []:

  • @​livekit/components-core@​0.8.3

v1.5.2

Compare Source

Patch Changes

• Added close button in chat screen - #​740 (@​govind-io)

• Add useTrackVolume hooks - #​735 (@​lukasIO)

• Log error on non-ok http statuses of useToken - #​739 (@​lukasIO)

• Pin all direct dependencies (Fixes an dependency resolve issue with a broken usehooks-ts release) - #​751 (@​lukasIO)

• Updated dependencies [e805d41b, 3e15bde4]:

  • @​livekit/components-core@​0.8.3

64bit/async-openai (async-openai)

v0.18.3: v0.18.3

Compare Source

New

• fixed: Add missing language field in create transcription request #​188 by @​Taoaozw

Thank you Contributors

• @​Taoaozw made their first contribution in #​188 🎉

v0.18.2: v0.18.2

Compare Source

New

• Added dimensions param to embedding request #​184 #​185 by @​vmg-dev

Thank you Contributors

• @​vmg-dev made their first contribution in #​185 🎉

v0.18.1: v0.18.1

Compare Source

New

• fixed: Optional model in ModifyAssistantRequest in #​174 by @​CakeCrusher
• added: Cloudflare worker WASM example (only available in experiments branch) #​178 by @​ifsheldon
• updated: Contribution guidelines for minimum expectations from all of us.

Thank you Contributors

• @​CakeCrusher made their first contribution in #​174 🎉
• @​ifsheldon 🎉

postcss/autoprefixer (autoprefixer)

v10.4.17

Compare Source

• Fixed user-select: contain prefixes.

Plonq/bevy_panorbit_camera (bevy_panorbit_camera)

v0.11.1

Compare Source

What's Changed

• Touch Support by @​Plonq in https://github.com/Plonq/bevy_panorbit_camera/pull/42
• BREAKING Re-fixes egui issue with it not ignoring input for 1 frame. This fix was removed in 0.10.0 because I thought it wasn't needed any more, but apparently I was wrong.

Full Changelog: Plonq/bevy_panorbit_camera@0.10.0...0.11.1

chronotope/chrono (chrono)

v0.4.33: 0.4.33

Compare Source

This release fixes the broken docrs.rs build of chrono 0.4.32.

What's Changed

• Make rkyv feature imply size_32 (#​1383)
• Fixed typo in Duration::hours() exception (#​1384, thanks @​danwilliams)

v0.4.32

Compare Source

In this release we shipped part of the effort to reduce the number of methods that could unexpectedly panic, notably for the DateTime and Duration types.

Chrono internally stores the value of a DateTime in UTC, and transparently converts it to the local value as required. For example adding a second to a DateTime needs to be done in UTC to get the correct result, but adding a day needs to be done in local time to be correct. What happens when the value is near the edge of the representable range, and the implicit conversions pushes it beyond the representable range? Many methods could panic on such inputs, including formatting the value for Debug output.

In chrono 0.4.32 the range of NaiveDate, NaiveDateTime and DateTime is made slightly smaller. This allows us to always do the implicit conversion, and in many cases return the expected result. Specifically the range is now from January 1, -262144 until December 31, 262143, one year less on both sides than before. We expect this may trip up tests if you hardcoded the MIN and MAX dates.

Duration had a similar issue. The range of this type was pretty arbitrary picked to match the range of an i64 in milliseconds. Negating an i64::MIN pushes a value out of range, and in the same way negating Duration::MIN could push it out of our defined range and cause a panic. This turns out to be somewhat common and hidden behind many layers of abstraction. We adjusted the type to have a minimum value of -Duration::MAX instead and prevent the panic case.

Other highlights:

• Duration gained new fallible initialization methods.
• Better support for rkyv.
• Most methods on NaiveDateTime are now const.
• We had to bump our MSRV to 1.61 to keep building with our dependencies. This will also allow us to make more methods on DateTime const in a future release.

Complete list of changes:

Fixes

• Fix panic in TimeZone::from_local_datetime (#​1071)
• Fix out of range panics in DateTime getters and setters (#​1317, #​1329)

Additions

• Add NaiveDateTime::checked_(add|sub)_offset (#​1313)
• Add DateTime::to_utc (#​1325)
• Derive Default for Duration (#​1327)
• Add Duration::subsec_nanos (#​1327)
• Add try_* builders to Duration (#​1327)
• Implement AddAssign and SubAssign for Duration (#​1327)
• Make methods on NaiveDateTime const where possible (#​1286)
• Split clock feature into clock and now (#​1343, thanks @​mmastrac)
• Add From<NaiveDate> for NaiveDateTime (#​1355, thanks @​dcechano)
• Add NaiveDateTime::from_timestamp_nanos (#​1357, thanks @​Ali-Mirghasemi)
• Add Months::num_months() and num_years() (#​1373, thanks @​danwilliams)
• Add DateTime<Utc>::from_timestamp_millis (#​1374, thanks @​xmakro)

Changes

• Fix panic in Duration::MIN.abs() (adjust Duration::MIN by 1 millisecond) (#​1334)
• Bump MSRV to 1.61 (#​1347)
• Update windows-targets requirement from 0.48 to 0.52 (#​1360)
• Update windows-bindgen to 0.52 (#​1379)

Deprecations

• Deprecate standalone format functions (#​1306)

Documentation

• Improve doc comment and tests for timestamp_nanos_opt (#​1299, thanks @​mlegner)
• Switch to doc_auto_cfg (#​1305, #​1326)
• Document panics in Add/Sub impls and use expect (#​1316)
• Improve types listed in top-level documentation (#​1274)
• Improve deprecation note of TimeZone::datetime_from_str (#​1342, thanks @​tmccombs)
• Fix typos in Datelike impl for DateTime (#​1376, thanks @​ElectrifyPro)

Rkyv support

• Export Archived* types in rkyv module (#​1304)
• Duplicate derives on Archived* types (#​1271, thanks @​Awpteamoose)
• Archive derive of PartialEq for rkyv (#​959, thanks @​mkatychev)
• Expose rkyv features as features for chrono users (#​1368, thanks @​gz)

Changes to unstable features

• Don't let unstable-locales imply the alloc feature (#​1307)
• Remove format::{format_localized, format_item_localized} (#​1311)
• Inline write_rfc2822_inner, don't localize (#​1322)

Internal

• Add benchmark for DateTime::with_* (#​1309)
• Fix *_DAYS_FROM_YEAR_0 calculation (#​1312)
• Add NaiveTime::overflowing_(add|sub)_offset (#​1310)
• Rewrite DateTime::overflowing_(add|sub)_offset (#​1069)
• Tests calling date command set env LC_ALL (#​1315, thanks @​jtmoon79)
• Update deny.toml (#​1320)
• Bump actions/setup-node from 3 to 4 (#​1346)
• test.yml remove errant with: node-version (#​1352, thanks @​jtmoon79)
• CI Linting: Fix missing sources checkout in toml job (#​1371, thanks @​gibbz00)
• Silence clippy lint for test code with Rust 1.74.0 (#​1362)

Thanks to all contributors on behalf of the chrono team, @​djc and @​pitdicker!

motdotla/dotenv (dotenv)

v16.4.1

Compare Source

• Patch support for array as path option #​797

v16.4.0

Compare Source

• Add error.code to error messages around .env.vault decryption handling #​795
• Add ability to find .env.vault file when filename(s) passed as an array #​784

v16.3.2

Compare Source

Added

• Add debug message when no encoding set #​735

Changed

• Fix output typing for populate #​792
• Use subarray instead of slice #​793

vercel/next.js (eslint-config-next)

v14.1.0

Compare Source

gbaranski/ezsockets (ezsockets)

v0.6.2

• Add MessageSignal::new().

image-rs/image (image)

v0.24.8

Compare Source

New features:

• Added pure-Rust lossless WebP encoding.
• Added DynamicImage::new method.
• Added PngDecoder::gamma_value method.
• Added ImageFormat::{reading_enabled, writing_enabled, all}.
• TGA encoder now supports RLE encoding.
• Add rayon parallel iterators behind an optional rayon feature.
• Support CMYK TIFF images.
• Implement From for all image types.

Bug fixes:

• Fix decoding pngs with invalid text chunks.
• Handle non-fatal error dav1d::Error::Again.
• Do not round floats in interpolate.
• PNM decoder now scales samples according to specified maximum.
• Fix wrong implementation of unsharpen filter.
• Fix GifDecoder::with_limits to raise an error when limits are exceeded.

okonet/lint-staged (lint-staged)

v15.2.2

Compare Source

Patch Changes

• #​1391 fdcdad4 Thanks @​iiroj! - Lint-staged no longer tries to load configuration from files that are not checked out. This might happen when using sparse-checkout.

v15.2.1

Compare Source

Patch Changes

• #​1387 e4023f6 Thanks @​iiroj! - Ignore stdin of spawned commands so that they don't get stuck waiting. Until now, lint-staged has used the default settings to spawn linter commands. This means the stdin of the spawned commands has accepted input, and essentially gotten stuck waiting. Now the stdin is ignored and commands will no longer get stuck. If you relied on this behavior, please open a new issue and describe how; the behavior has not been intended.

livekit/client-sdk-js (livekit-client)

v1.15.11

Compare Source

Patch Changes

• Resume audio playback status when switching back to tab on iOS - c247f7d67c423f5d7ea09549cd2eb44a95762cbb (@​lukasIO)

• Buffer room events during reconnect - f83124d881dc962ff940b806c45da4d1b8c0b86e (@​lukasIO)

• Fix state handling issue in SignalClient - 1200535d0c87d127cebd0b07330dd0a688843287 (@​holzgeist)

v1.15.10

1.15.10

Patch Changes

• Perform full reconnect on leave during reconnect - dc95472cca12ad3b150e824da8e3f7e387de0e12 (@​lukasIO)

1.15.9

Patch Changes

• Fix for recovering SignalChannel closing during reconnect - d1fa7554630d9f9fd787784b154eb460c8568894 (@​lukasIO)

• Log server offer sdp - 6cd3ae5f0c3c30ce852d7b3f000f1adf2e08eb96 (@​lukasIO)

Full Changelog: livekit/client-sdk-js@v1.15.8...v1.15.10

v1.15.9

Patch Changes

• Fix for recovering SignalChannel closing during reconnect - d1fa7554630d9f9fd787784b154eb460c8568894 (@​lukasIO)

• Log server offer sdp - 6cd3ae5f0c3c30ce852d7b3f000f1adf2e08eb96 (@​lukasIO)

vercel/next.js (next)

v14.1.0

Compare Source

nodejs/node (node)

v20.11.0

Compare Source

pnpm/pnpm (pnpm)

v8.15.1

Compare Source

Patch Changes

• Use the object-hash library instead of node-object-hash for hashing keys of side-effects cache #​7591.
• bundledDependencies should never be added to the lockfile with false as the value #​7576.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

v8.15.0

Compare Source

Minor Changes

• When the license field does not exist in package.json but a license file exists, try to match and extract the license name #​7530.

Patch Changes

• Running pnpm update -r --latest will no longer downgrade prerelease dependencies #​7436.
• --aggregate-output should work on scripts executed from the same project #​7556.
• Prefer hard links over reflinks on Windows as they perform better #​7564.
• Reduce the length of the side-effects cache key. Instead of saving a stringified object composed from the dependency versions of the package, use the hash calculated from the said object #​7563.
• Throw an error if pnpm update --latest runs with arguments containing versions specs. For instance, pnpm update --latest foo@next is not allowed #​7567.
• Don't fail in Windows CoW if the file already exists #​7554.

Platinum Sponsors

Gold Sponsors

Configuration 📅 Schedule: Branch creation - "after 5pm on monday" (UTC), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR has been generated by Mend Renovate. View repository job log here.