Skip to content

chore(deps): bump i18next-http-backend and postcss#40409

Merged
ggazzo merged 1 commit into
developfrom
bump-postcss-i18next
May 5, 2026
Merged

chore(deps): bump i18next-http-backend and postcss#40409
ggazzo merged 1 commit into
developfrom
bump-postcss-i18next

Conversation

@yasnagat
Copy link
Copy Markdown
Member

@yasnagat yasnagat commented May 5, 2026

Proposed changes (including videos or screenshots)

This PR bumps i18next-http-backend (v1.4.5 -> v3.0.6) and postcss (v8.4.49 -> 8.5.10) to use patched versions and solve related CVEs.

Issue(s)

SB-994

Steps to test or reproduce

Further comments

Summary by CodeRabbit

  • Chores
    • Updated dependencies across the application to latest stable versions, including frontend build tools and internationalization libraries for improved compatibility and stability.

bump(deps): i18next-http-backend and postcss
@yasnagat yasnagat requested review from a team as code owners May 5, 2026 16:52
@dionisio-bot
Copy link
Copy Markdown
Contributor

dionisio-bot Bot commented May 5, 2026

Looks like this PR is not ready to merge, because of the following issues:

  • This PR is missing the 'stat: QA assured' label

Please fix the issues and try again

If you have any trouble, please check the PR guidelines

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 5, 2026

⚠️ No Changeset found

Latest commit: 3d47c2a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 5, 2026

Walkthrough

The PR updates runtime and development dependencies across the monorepo: i18next-http-backend is bumped from ^1.4.5 to ^3.0.6 in the Meteor app, and postcss is updated from ~8.4.49 to 8.5.10 in both the Meteor app and Livechat package.

Changes

Dependency Updates

Layer / File(s) Summary
Runtime Dependencies
apps/meteor/package.json
i18next-http-backend bumped from ^1.4.5 to ^3.0.6. postcss updated from ~8.4.49 to 8.5.10.
Development Dependencies
packages/livechat/package.json
postcss updated from ~8.4.49 to 8.5.10.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested labels

type: chore

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The PR title accurately and concisely describes the main change: bumping two specific dependencies (i18next-http-backend and postcss). It directly matches the changeset content.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

  • Generate code and open pull requests
  • Plan features and break down work
  • Investigate incidents and troubleshoot customer tickets together
  • Automate recurring tasks and respond to alerts with triggers
  • Summarize progress and report instantly

Built for teams:

  • Shared memory across your entire org—no repeating context
  • Per-thread sandboxes to safely plan and execute work
  • Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@yasnagat yasnagat changed the title bump(deps): i18next-http-backend and postcss chore(deps): i18next-http-backend and postcss May 5, 2026
@yasnagat yasnagat changed the title chore(deps): i18next-http-backend and postcss chore(deps): bump i18next-http-backend and postcss May 5, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 5, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.05%. Comparing base (09933be) to head (3d47c2a).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##           develop   #40409      +/-   ##
===========================================
- Coverage    70.06%   70.05%   -0.02%     
===========================================
  Files         3301     3299       -2     
  Lines       120778   120706      -72     
  Branches     21608    21614       +6     
===========================================
- Hits         84627    84558      -69     
+ Misses       32869    32857      -12     
- Partials      3282     3291       +9     
Flag Coverage Δ
e2e 59.58% <ø> (-0.08%) ⬇️
e2e-api 46.22% <ø> (ø)
unit 70.95% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@yasnagat yasnagat requested a review from julio-rocketchat May 5, 2026 19:58
@yasnagat yasnagat added this to the 8.5.0 milestone May 5, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates security-relevant frontend/build dependencies by bumping i18next-http-backend and postcss to patched versions, along with corresponding yarn.lock resolutions.

Changes:

  • Bump i18next-http-backend from ^1.4.5 to ^3.0.6 (apps/meteor).
  • Bump postcss from ~8.4.49 to 8.5.10 (apps/meteor + packages/livechat).
  • Refresh yarn.lock to reflect updated dependency graph (including updated transitive resolutions like cross-fetch).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File Description
yarn.lock Updates lockfile entries/resolutions for the bumped dependencies and their transitive deps.
packages/livechat/package.json Bumps postcss devDependency to 8.5.10.
apps/meteor/package.json Bumps i18next-http-backend to ^3.0.6 and postcss to 8.5.10.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

"mini-css-extract-plugin": "~2.9.4",
"npm-run-all": "^4.1.5",
"postcss": "~8.4.49",
"postcss": "8.5.10",
Comment thread apps/meteor/package.json
"playwright-core": "~1.52.0",
"playwright-qase-reporter": "~2.5.0",
"postcss": "~8.4.49",
"postcss": "8.5.10",
@ggazzo ggazzo merged commit f41233d into develop May 5, 2026
189 of 199 checks passed
@ggazzo ggazzo deleted the bump-postcss-i18next branch May 5, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants