Skip to content

security: bump Remix packages to ^2.17.2 in integration-tests#301

Closed
thomasrockhu-codecov wants to merge 3 commits intomainfrom
security/tier-s-remix-integration-tests-root
Closed

security: bump Remix packages to ^2.17.2 in integration-tests#301
thomasrockhu-codecov wants to merge 3 commits intomainfrom
security/tier-s-remix-integration-tests-root

Conversation

@thomasrockhu-codecov
Copy link
Copy Markdown
Contributor

Summary

Bumps @remix-run/dev to ^2.17.2 and adds @remix-run/node and @remix-run/react at ^2.17.2 in integration-tests/package.json so the workspace matches patched Remix releases:

Test plan

  • CI passes for this branch.

Made with Cursor

Updates @remix-run/dev and adds @remix-run/node and @remix-run/react at
^2.17.2 so the integration-tests workspace matches patched Remix releases
(GHSA-9583-h5hc-x8cw, GHSA-4q56-crqp-v477).

Made-with: Cursor
@codecov-notifications
Copy link
Copy Markdown

codecov-notifications bot commented Apr 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

Components Coverage Δ
Plugin core 98.05% <ø> (ø)
Rollup plugin 8.42% <ø> (ø)
Vite plugin 8.42% <ø> (ø)
Webpack plugin 56.84% <ø> (ø)

📢 Thoughts on this report? Let us know!

@sentry
Copy link
Copy Markdown

sentry bot commented Apr 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.74%. Comparing base (1b3e961) to head (d524dc4).
✅ All tests successful. No failed tests found.

Additional details and impacted files
Components Coverage Δ
Plugin core 98.05% <ø> (ø)
Rollup plugin 8.42% <ø> (ø)
Vite plugin 8.42% <ø> (ø)
Webpack plugin 56.84% <ø> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@sentry
Copy link
Copy Markdown

sentry bot commented Apr 2, 2026

Bundle Report

Changes will decrease total bundle size by 305.21kB (-3.79%) ⬇️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
@codecov/vite-plugin-esm 1.24kB -5.15kB (-80.6%) ⬇️
@codecov/bundler-plugin-core-esm 14.67kB -297.93kB (-95.31%) ⬇️
@codecov/sveltekit-plugin-esm 891 bytes -2.13kB (-70.56%) ⬇️
@codecov/example-sveltekit-app-client-esm 727.67kB 2 bytes (0.0%) ⬆️
@codecov/example-sveltekit-app-server-esm 984.06kB 1 bytes (0.0%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: @codecov/example-sveltekit-app-client-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
_app/immutable/chunks/entry.*.js 2 bytes 31.45kB 0.01%
view changes for bundle: @codecov/remix-vite-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 957 bytes 957 bytes 100.0% 🚀
index.d.ts (Deleted) -957 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
static/Hg__1qN52eZtSwtVmTjOF/_buildManifest.js (New) 224 bytes 224 bytes 100.0% 🚀
static/Hg__1qN52eZtSwtVmTjOF/_ssgManifest.js (New) 77 bytes 77 bytes 100.0% 🚀
static/9_46r_T67y4JBGANpRrqT/_buildManifest.js (Deleted) -224 bytes 0 bytes -100.0% 🗑️
static/9_46r_T67y4JBGANpRrqT/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-15-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
server/middleware-*.js -885 bytes 36 bytes -96.09%
server/middleware-*.js 885 bytes 921 bytes 2458.33% ⚠️
static/LEC2mQxrbYFJbFWkMKH7Z/_buildManifest.js (New) 543 bytes 543 bytes 100.0% 🚀
static/LEC2mQxrbYFJbFWkMKH7Z/_ssgManifest.js (New) 77 bytes 77 bytes 100.0% 🚀
static/90lMxIzeZ1s_Ls5nGwa7l/_buildManifest.js (Deleted) -543 bytes 0 bytes -100.0% 🗑️
static/90lMxIzeZ1s_Ls5nGwa7l/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/nuxt-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 855 bytes 855 bytes 100.0% 🚀
index.d.mts (Deleted) -855 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-astro-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
manifest_Cph_A62w.mjs (New) 3.34kB 3.34kB 100.0% 🚀
manifest_DhlY6ZhK.mjs (Deleted) -3.34kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/bundler-plugin-core-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 14.67kB 14.67kB 100.0% 🚀
index.mjs (Deleted) -312.6kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/vite-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.cts (New) 1.24kB 1.24kB 100.0% 🚀
index.mjs (Deleted) -6.39kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-sveltekit-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
chunks/internal.js 1 bytes 18.48kB 0.01%
view changes for bundle: @codecov/astro-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 862 bytes 862 bytes 100.0% 🚀
index.d.cts (Deleted) -862 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-astro-5-app-server-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
manifest_BrcJs-TN.mjs (New) 3.37kB 3.37kB 100.0% 🚀
manifest_CKJwOSIn.mjs (Deleted) -3.37kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/sveltekit-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 891 bytes 891 bytes 100.0% 🚀
index.mjs (Deleted) -3.03kB 0 bytes -100.0% 🗑️

thomasrockhu-codecov added a commit that referenced this pull request Apr 3, 2026
Combine changes from PR #300 and PR #301 into PR #299: align
integration-tests and integration-tests/test-apps/remix with patched
Remix releases (GHSA-9583-h5hc-x8cw and related advisories).

Made-with: Cursor
@thomasrockhu-codecov
Copy link
Copy Markdown
Contributor Author

Closing in favor of #299, which now includes the integration-tests workspace Remix bumps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant