chore(deps): bump i18next-http-backend and postcss#40409
Conversation
bump(deps): i18next-http-backend and postcss
|
Looks like this PR is not ready to merge, because of the following issues:
Please fix the issues and try again If you have any trouble, please check the PR guidelines |
|
WalkthroughThe PR updates runtime and development dependencies across the monorepo: ChangesDependency Updates
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Suggested labels
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. Tip 💬 Introducing Slack Agent: The best way for teams to turn conversations into code.Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.
Built for teams:
One agent for your entire SDLC. Right inside Slack. Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## develop #40409 +/- ##
===========================================
- Coverage 70.06% 70.05% -0.02%
===========================================
Files 3301 3299 -2
Lines 120778 120706 -72
Branches 21608 21614 +6
===========================================
- Hits 84627 84558 -69
+ Misses 32869 32857 -12
- Partials 3282 3291 +9
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
This PR updates security-relevant frontend/build dependencies by bumping i18next-http-backend and postcss to patched versions, along with corresponding yarn.lock resolutions.
Changes:
- Bump
i18next-http-backendfrom^1.4.5to^3.0.6(apps/meteor). - Bump
postcssfrom~8.4.49to8.5.10(apps/meteor + packages/livechat). - Refresh
yarn.lockto reflect updated dependency graph (including updated transitive resolutions likecross-fetch).
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
yarn.lock |
Updates lockfile entries/resolutions for the bumped dependencies and their transitive deps. |
packages/livechat/package.json |
Bumps postcss devDependency to 8.5.10. |
apps/meteor/package.json |
Bumps i18next-http-backend to ^3.0.6 and postcss to 8.5.10. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "mini-css-extract-plugin": "~2.9.4", | ||
| "npm-run-all": "^4.1.5", | ||
| "postcss": "~8.4.49", | ||
| "postcss": "8.5.10", |
| "playwright-core": "~1.52.0", | ||
| "playwright-qase-reporter": "~2.5.0", | ||
| "postcss": "~8.4.49", | ||
| "postcss": "8.5.10", |
Proposed changes (including videos or screenshots)
This PR bumps i18next-http-backend (v1.4.5 -> v3.0.6) and postcss (v8.4.49 -> 8.5.10) to use patched versions and solve related CVEs.
Issue(s)
SB-994
Steps to test or reproduce
Further comments
Summary by CodeRabbit