chore(deps): bump the deps group across 1 directory with 4 updates

[dependabot]

Bumps the deps group with 4 updates in the /solid-start directory: @solidjs/router, @solidjs/start, solid-js and vinxi.

Updates @solidjs/router from 0.15.1 to 0.15.3

Changelog

Sourced from @​solidjs/router's changelog.

0.15.3

Patch Changes

• 97184e4: more lenient on cache resuming (allow nested promises during hydration)

0.15.2

Patch Changes

• fe5c83e: Add JSdoc
• 9a5e350: Vite 6 compatibility
• 20ad18f: only clear completed actions on navigation

Commits

• See full diff in compare view

Updates @solidjs/start from 1.0.10 to 1.0.11

Release notes

Sourced from @​solidjs/start's releases.

v0.5.0 - Async Local Storage ...Everywhere

This release is a bunch of organizational shifts from our learnings after running Solid Start Beta 2 for the first month (see: solidjs/solid-start#1279). These are all minor changes but we hope they will smooth out the dev experience significantly. This release is largely possible due to the heroic efforts of @​nksaraf and the multitudes of updates/fixes @​lxsmnsyc has been making behind the scenes.

RequestEvent improvements

Main update is we've changed how we look at the main event object. Before we were mashing everything on top of H3 which wasn't always the best. We couldn't just adopt H3's Event because we have conventions in the Solid ecosystem and it was a bit awkward trying to figure out how to best interact with both systems in place.

Main change here is that instead of merging, the underlying H3Event is now available at event.nativeEvent. But having to pump that through helpers all the time would be a bit clunky so we have a couple new mechanism to make it easier to use.

Stubbing out the Response

If you are doing simple operations like updating the headers or status of the response you can do that now directly off our event the same way you can with request:

import { getRequestEvent } from "solid-js/web";
const event = getRequestEvent();
console.log(event.request.url);
event.response.headers.set("x-foo", "bar");
console.log(event.response.status);
event.response.status = 201;

This response object proxies the H3 methods which has the nice benefit of being able to use it easier in isomorphic settings without worrying about imports and bundling. Components like <HttpStatus> and <HttpHeader> are built using this primitive.

Async Local Storage Everywhere

HTTP helpers are now available at vinxi/http. Previously we were re-exporting these but we don't want to own this piece. Currently there is a light wrapper around H3 done here. But it means that the provided helpers are usable now directly without passing the H3Event in.

import { useSession } from "vinxi/http";
async function someServerFunction() {
"use server";
const session = await useSession({ password: process.env.SESSION_SECRET});
doSomethingWith(session.data.userId);
}

You can still pass in the H3Event if you want as the first argument, and these Vinxi wrappers also support passing in Solid's RequestEvent as well but between these 2 APIs you probably won't be interfacing with the H3Event much directly in application code.

Typing Locals

SolidStart uses event.locals to pass around local context to be used as you see fit. Before this was just a record but now you can add specific types to it as well:

declare module "@solidjs/start/server" {
  interface RequestEventLocals {
    myNumber: number;
    someString: string;
  }
}
</tr></table> 

... (truncated)

Changelog

Sourced from @​solidjs/start's changelog.

1.0.11

Patch Changes

• 8e0c56c: forward set cookies through single-flight
• 9536d74: update vite-plugin-solid of start
• fa1128a: fix: handle request body streaming with latest netlify preset

Commits

• See full diff in compare view

Updates solid-js from 1.9.3 to 1.9.4

Commits

• 9316baf v1.9.4
• 7f9cd3d lazy image, tagged template detection, security fixes
• dca942a formatting
• b93956f fix escaping in resolution done outside of DOM Expressions
• 4d824b0 Merge branch 'main' of github.com:solidjs/solid
• 199dd69 fix reconcile null guard
• 32aa744 Improve resolving arguments in createResource (#2353)
• See full diff in compare view

Updates vinxi from 0.5.1 to 0.5.3

Release notes

Sourced from vinxi's releases.

vinxi@0.5.3

Patch Changes

• 09cd59b1: enable vite mode flag via cli
• 696defe4: Fix a regression that caused css imported with sideeffects such as ?url, to be rendered during ssr (in dev).
• fd93107b: fix: use CLI-given config file

vinxi@0.5.2

Patch Changes

• b85ab82c: Update unstorage

Changelog

Sourced from vinxi's changelog.

0.5.3

Patch Changes

• 09cd59b1: enable vite mode flag via cli
• 696defe4: Fix a regression that caused css imported with sideeffects such as ?url, to be rendered during ssr (in dev).
• fd93107b: fix: use CLI-given config file

0.5.2

Patch Changes

• b85ab82c: Update unstorage

Commits

• 5d36b3a RELEASING: Releasing 28 package(s)
• c2b9f3d Merge pull request #439 from carvajalconsultants/main
• dbb7601 Merge branch 'main' into main
• f26182a Merge pull request #446 from IainMcHugh/enable-vite-mode-flag
• 696defe fix: exclude css with sideeffects from ssr during dev
• b3591c8 RELEASING: Releasing 28 package(s)
• f2c749d Merge pull request #437 from birkskyum/update-unstorage
• b6d9643 fix: delete url parameter for ssrLoadModule calls in findStylesInModuleGraph
• 7c65771 fix: use CLI-given config file
• 2fe3158 jsdoc format mode is optional
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[dependabot]

Superseded by #4378.