Skip to content

cherry-pick: fix(deps): update all non-major dependenciesv5.0 (conflict)#582

Merged
kriszyp merged 3 commits into
v5.0from
cherry-pick/v5.0/pr-563
May 19, 2026
Merged

cherry-pick: fix(deps): update all non-major dependenciesv5.0 (conflict)#582
kriszyp merged 3 commits into
v5.0from
cherry-pick/v5.0/pr-563

Conversation

@kriszyp
Copy link
Copy Markdown
Member

@kriszyp kriszyp commented May 18, 2026

Summary

Cherry-pick of #563 to v5.0. Direct cherry-pick was infeasible due to package-lock.json divergence and unrelated drift between main and v5.0 in package.json and workflow files; this PR applies only PR #563's targeted changes:

  • package.json — bump 8 deps to final state of PR fix(deps): update all non-major dependencies #563:
    • axios 1.14.0 → 1.16.0
    • @aws-sdk/lib-storage 3.1024.0 → 3.1045.0
    • fs-extra 11.3.4 → 11.3.5
    • msgpackr 1.11.9 → 1.11.12
    • semver 7.7.4 → 7.8.0
    • sinon ^21.0.0 → 21.0.3 (matches post-revert state)
    • uuid 11.1.0 → 11.1.1
    • yaml 2.8.3 → 2.9.0
  • package-lock.json — regenerated via npm install
  • .github/workflows — action version bumps applied across v5.0 references:
    • slackapi/slack-github-action v3.0.1 → v3.0.3
    • actions/setup-node v6.3.0 → v6.4.0
    • actions/upload-artifact v7.0.0 → v7.0.1
  • renovate.json — add sinon to its own group (from chore: Group sinon on its own)
  • unitTests/dataLayer/update.test.jssinon.resetHistory()sandbox.resetHistory() (from fix: Sandbox reset in update.test.js)

Test plan

  • CI passes (unit + integration tests on v5.0)
  • No regressions from the dependency bumps

🤖 Generated with Claude Code

…(PR #563)

Squashed application of PR #563 onto v5.0:
- package.json: bump axios, @aws-sdk/lib-storage, fs-extra, msgpackr,
  semver, sinon, uuid, yaml to versions matched by PR #563 final state
- package-lock.json: regenerated via npm install
- .github/workflows: bump slackapi/slack-github-action v3.0.1→v3.0.3,
  actions/setup-node v6.3.0→v6.4.0, actions/upload-artifact v7.0.0→v7.0.1
- renovate.json: group sinon on its own
- unitTests/dataLayer/update.test.js: sandbox.resetHistory() (PR #563)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@kriszyp kriszyp requested review from a team as code owners May 18, 2026 21:51
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 18, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtsx@​4.22.3 ⏵ 4.22.2100 +11008293100
Updated@​aws-sdk/​lib-storage@​3.1024.0 ⏵ 3.1045.01001008598100
Updatedaxios@​1.14.0 ⏵ 1.16.087 -4100 +4010096100
Updatedsemver@​7.7.4 ⏵ 7.8.0100 +1100100 +190100
Updatedfs-extra@​11.3.4 ⏵ 11.3.5100 +110010090100
Updatedyaml@​2.8.3 ⏵ 2.9.099 +110010091100
Updatedoxlint@​1.66.0 ⏵ 1.65.099 +11009196100
Updatedmsgpackr@​1.11.9 ⏵ 1.11.1298 +1100100 +192100
Updateduuid@​11.1.0 ⏵ 11.1.1100 +1100 +2100 +192100
Updatedsinon@​21.1.2 ⏵ 21.0.397 +11009893100

View full report

Copy link
Copy Markdown
Contributor

@dawsontoth dawsontoth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should the package.json version be "version": "5.1.1"? I'm guessing we didn't need that bit.

@dawsontoth
Copy link
Copy Markdown
Contributor

There are merge conflicts in [error] resources/auditStore.ts: SyntaxError: Merge conflict marker encountered. (52:1) too, which the formatter is revealing.

@kriszyp kriszyp merged commit 2025afd into v5.0 May 19, 2026
18 of 22 checks passed
@kriszyp kriszyp deleted the cherry-pick/v5.0/pr-563 branch May 19, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants