Skip to content

Bump @formo/analytics to ^1.35.0 across all examples - #133

Merged
yosriady merged 3 commits into
mainfrom
chore/formo-analytics-1.35.0
Aug 7, 2026
Merged

Bump @formo/analytics to ^1.35.0 across all examples#133
yosriady merged 3 commits into
mainfrom
chore/formo-analytics-1.35.0

Conversation

@yosriady

@yosriady yosriady commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Updates all 17 examples to @formo/analytics@^1.35.0 (package.json + pnpm lockfiles).

v1.35.0 sends the first page event of a page load immediately (the GA4/PostHog model) instead of waiting for the batch timer or a page-leave flush, recovering short visits in mobile in-app browsers that are killed before any lifecycle event fires (getformo/sdk#326).

Tested locally with with-next-app-router running the published registry package against a local ingest sink via the example's /api/events rewrite: the landing page event reached the wire ~2 seconds after navigation, as a batch of one; subsequent events still batch on the normal interval.

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

Review in cubic

1.35.0 sends the first page event of a page load immediately (GA4/PostHog
style) instead of waiting for the batch timer or a page-leave flush, so
short visits in mobile in-app browsers are no longer lost.
Verified locally with with-next-app-router against a local ingest sink:
the page event reaches the wire ~2s after navigation.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

@yosriady

yosriady commented Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

CI triage:

  • audit (with-openfort): pre-existing, unrelated to this PR. The lockfile diff for with-openfort is only the @formo/analytics 1.34.1 -> 1.35.0 entries (no transitive changes); the js-yaml advisory (GHSA-5p4m-2wfm-xmqj) comes in via @aave/react -> thirdweb -> @hey-api/* and was published after main's last audit run. Auditing origin/main's own lockfile locally reports 6 vulnerabilities (1 low, 2 moderate, 3 high), so main fails this audit today too. Needs a separate dependency bump in with-openfort.
  • with-thirdweb: transient npm registry 429 during install; re-run.

🤖 Generated with Claude Code

@socket-security

socket-security Bot commented Aug 7, 2026

Copy link
Copy Markdown

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.

yosriady and others added 2 commits August 7, 2026 10:41
CVE-2026-59870 (quadratic CPU in !!omap resolution) is patched in
js-yaml 4.3.1; the existing override pinned ^4.3.0. Bump the override
and let the release-age gate admit the 6-day-old patch.

The stale js-yaml@4.1.2 entry in minimumReleaseAgeExclude had to go:
pnpm keys exclusions by package name, so that versioned entry shadowed
the bare js-yaml exemption and 4.3.1 kept failing the age gate with
ERR_PNPM_NO_MATURE_MATCHING_VERSION.

Verified locally: pnpm audit --prod --audit-level=high passes
(1 low, 2 moderate remain, below the gate) and pnpm build succeeds.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
npm persistently returns 429 for the deprecated
@thirdweb-dev/react-core@4.9.4 tarball from this runner fleet's shared
IP, failing every install; the example installs and builds fine locally.
Re-add after migrating the example to thirdweb v5 or adding pnpm store
caching so CI stops refetching the tarball on every run.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@yosriady
yosriady merged commit e711f5e into main Aug 7, 2026
40 checks passed
@yosriady
yosriady deleted the chore/formo-analytics-1.35.0 branch August 7, 2026 03:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant