Skip to content

Conversation

loreto
Copy link
Contributor

@loreto loreto commented Aug 22, 2025

Summary

  • Update dependencies in devbox examples
  • Update dependencies in our go code
  • Update tools referenced by go.mod
  • Run devbox update to update the nix dependencies

How was it tested?

Ran all tests

Community Contribution License

All community contributions in this pull request are licensed to the project
maintainers under the terms of the
Apache 2 License.

By creating this pull request, I represent that I have the right to license the
contributions to the project maintainers under the Apache 2 License as stated in
the
Community Contribution License.

- Update dependencies in devbox examples
- Update dependencies in our go code
- Update tools referenced by go.mod
@loreto loreto requested review from gcurtis and Copilot August 22, 2025 19:43
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates dependencies across the devbox codebase to ensure compliance with the latest versions. The changes focus on bumping version numbers for Go dependencies, Ruby gems, and Node.js packages used in various examples and tools.

  • Updated Go module dependencies including AWS SDK, tablewriter, and numerous linting/analysis tools
  • Updated Rails version in the blog example from 7.0.8 to 7.1.5
  • Updated documentation app dependencies including React, TypeScript, and OpenAPI docs plugins

Reviewed Changes

Copilot reviewed 4 out of 7 changed files in this pull request and generated 1 comment.

File Description
internal/boxcli/auth.go Updated tablewriter API usage to use new Bulk method instead of deprecated AppendBulk
go.mod Comprehensive update of Go dependencies and tools to latest versions
examples/stacks/rails/blog/Gemfile Updated Rails version from 7.0.8 to 7.1.5
docs/app/package.json Updated Node.js dependencies including React, TypeScript, and documentation plugins

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

table := tablewriter.NewWriter(cmd.OutOrStdout())
table.SetRowLine(true)
table.AppendBulk([][]string{
// Row lines are configured through the renderer in the new API
Copy link
Preview

Copilot AI Aug 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[nitpick] The comment explains the removal of SetRowLine but doesn't explain what the new renderer configuration would look like or where it should be configured. Consider adding more context about how row lines are now configured in the new API.

Suggested change
// Row lines are configured through the renderer in the new API
// To configure row lines (horizontal lines between rows) in the new API,
// use table.SetRowLine(true) before rendering. The SetRowLine method controls
// whether horizontal lines are drawn between table rows. For more customization,
// refer to the tablewriter documentation: https://pkg.go.dev/github.com/olekukonko/tablewriter

Copilot uses AI. Check for mistakes.

@loreto loreto merged commit f25eae9 into main Aug 22, 2025
33 checks passed
@loreto loreto deleted the daniel/vuln branch August 22, 2025 21:52
savil added a commit that referenced this pull request Sep 29, 2025
## Summary

Docusaurus was failing to start due to an incompatible upgrade in #2684:
`Module not found: Error: Can't resolve '@theme/ResponseSamples'`

Also updated README to reflect new tooling. 
Finally, I tried to fix the local `pnpm start` opening to
`localhost:3000/docs/devbox` but didn't succeed for now. Left a note in
the README to alert developers about it.

**Upgrade Fix**
- The component name changed from ResponseSamples to ResponseExamples,
but more importantly, the component API also changed:
- Old (v4.4.0):
```
  import ResponseSamples from "@theme/ResponseSamples";

  <ResponseSamples
    responseExample={"{\n  \"query\": \"string\", ...}"}
    language={"json"}
  />
```
- New (v4.5.1):
The new version uses a completely different component structure - it no
longer uses ResponseSamples or ResponseExamples directly in the
generated MDX. Instead, it uses a different set of components like
StatusCodes, RequestSchema, etc.


```
# Regenerate the API docs from the OpenAPI spec
pnpm docusaurus gen-api-docs nixhub

# Move the regenerated files to the correct location
cp docs/nixhub/*.api.mdx nixhub/

# Clean up the temporary directory
rm -rf docs/nixhub
```

Files Updated

- nixhub/search-packages.api.mdx
- nixhub/resolve-a-package-version.api.mdx
- nixhub/get-a-package.api.mdx

These files now use the updated component structure compatible with
docusaurus-theme-openapi-docs v4.5.1.

## How was it tested?

`devbox run start` and opened devbox docs as well as the Nixhub docs.

`devbox run build` and `devbox run serve` and opened the docs again in
localhost, just to be safe and ensure the production environment will
work in Vercel.

## Community Contribution License

All community contributions in this pull request are licensed to the
project
maintainers under the terms of the
[Apache 2 License](https://www.apache.org/licenses/LICENSE-2.0).

By creating this pull request, I represent that I have the right to
license the
contributions to the project maintainers under the Apache 2 License as
stated in
the
[Community Contribution
License](https://github.com/jetify-com/opensource/blob/main/CONTRIBUTING.md#community-contribution-license).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants