Skip to content

chore(deps): dependency sweep — freshening + alert triage - #2211

Closed
apify-deps[bot] wants to merge 1 commit into
masterfrom
chore/deps-sweep
Closed

apify-deps[bot] wants to merge 1 commit into
masterfrom
chore/deps-sweep

Conversation

@apify-deps

@apify-deps apify-deps Bot commented Sep 7, 2026

Copy link
Copy Markdown

Summary

Dependency sweep — in-range freshening for website/ (all within existing ranges), no security bumps landed (the one open alert doesn't apply — see below):

  • @docusaurus/* ^3.9.2 → ^3.10.2, react/react-dom → ^19.2.8, axios → ^1.20.0, oxlint → ^1.81.0, and other in-range patch/minor bumps across website/pnpm-lock.yaml.

✅ Dismissed (don't apply to our usage)

  • qs (medium) — not_used: the array-limit bypass only triggers via qs.parse(str, { comma: true, throwOnLimitExceeded: true }). Our only consumer, express/body-parser (pulled in by webpack-dev-server, used solely by the local docusaurus start dev command — not the CI build), calls qs.parse() without comma: true. The patched 6.16.0 is also outside body-parser@1.20.6's declared ~6.15.1 range, so it can't be reached by an in-range bump anyway. (alert #221)

🤖 Generated with Claude Code

@apify-deps apify-deps Bot added the adhoc Ad-hoc unplanned task added during the sprint. label Sep 7, 2026
@apify-deps
apify-deps Bot requested a review from B4nan September 7, 2026 01:22
@codecov

codecov Bot commented Sep 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.74%. Comparing base (d445359) to head (844efe3).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #2211      +/-   ##
==========================================
- Coverage   93.76%   93.74%   -0.02%     
==========================================
  Files         181      181              
  Lines       12861    12861              
==========================================
- Hits        12059    12057       -2     
- Misses        802      804       +2     
Flag Coverage Δ
unit 93.74% <ø> (-0.02%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@vdusek

vdusek commented Sep 16, 2026

Copy link
Copy Markdown
Collaborator

Closing this, and let's wait for the next schedule

@vdusek vdusek closed this Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants