Skip to content

chore(deps): bump eventsource-parser from 3.0.6 to 3.0.8#239

Merged
mcowger merged 1 commit intomainfrom
dependabot/bun/eventsource-parser-3.0.8
Apr 20, 2026
Merged

chore(deps): bump eventsource-parser from 3.0.6 to 3.0.8#239
mcowger merged 1 commit intomainfrom
dependabot/bun/eventsource-parser-3.0.8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps eventsource-parser from 3.0.6 to 3.0.8.

Release notes

Sourced from eventsource-parser's releases.

v3.0.8

3.0.8 (2026-04-19)

Performance Improvements

  • avoid O(N²) when a single SSE event spans many chunks (#28) (4c41223)

This release is also available on:

v3.0.7

3.0.7 (2026-04-17)

Bug Fixes

  • downgrade browserslist node.js declaration to node 18 (50d3c2e)

Performance Improvements

  • ~3.75x faster parse via inline fast-paths and single-pass line processing (2383efe)

This release is also available on:

Changelog

Sourced from eventsource-parser's changelog.

3.0.8 (2026-04-19)

Performance Improvements

  • avoid O(N²) when a single SSE event spans many chunks (#28) (4c41223)

3.0.7 (2026-04-17)

Bug Fixes

  • downgrade browserslist node.js declaration to node 18 (50d3c2e)

Performance Improvements

  • ~3.75x faster parse via inline fast-paths and single-pass line processing (2383efe)
Commits
  • 577bf98 chore(release): 3.0.8 [skip ci]
  • 72cd758 refactor: readability (clarify BOM stripping)
  • 9422e42 chore: update lockfiles
  • 4c41223 perf: avoid O(N²) when a single SSE event spans many chunks (#28)
  • 3ea73f7 chore(release): 3.0.7 [skip ci]
  • 7d62667 ci: use oidc (trusted publishing)
  • f6ced59 refactor: improve readability of parser
  • 2383efe perf: ~3.75x faster parse via inline fast-paths and single-pass line processing
  • 1f5b93b chore: bun/deno lockfiles
  • c838ad0 chore: drop node 18 tests
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for eventsource-parser since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [eventsource-parser](https://github.com/rexxars/eventsource-parser) from 3.0.6 to 3.0.8.
- [Release notes](https://github.com/rexxars/eventsource-parser/releases)
- [Changelog](https://github.com/rexxars/eventsource-parser/blob/main/CHANGELOG.md)
- [Commits](rexxars/eventsource-parser@v3.0.6...v3.0.8)

---
updated-dependencies:
- dependency-name: eventsource-parser
  dependency-version: 3.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 20, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 20, 2026

✅ Review Complete

This PR bumps eventsource-parser from 3.0.6 to 3.0.8, which is a patch release containing only performance improvements and bug fixes with no API changes.

Review Summary

Files using eventsource-parser (7 total):

  • debug-manager.ts - SSE parsing for debug log capture
  • openai.ts - Stream transformation for OpenAI endpoints
  • responses.ts - OpenAI Responses API streaming
  • anthropic/stream-transformer.ts - Anthropic SSE stream handling
  • gemini/stream-transformer.ts - Gemini SSE stream handling
  • 2 test files

Change analysis:

  • ✅ All usages follow the stable createParser({ onEvent: (event: EventSourceMessage) => {...} }) pattern
  • ✅ This is a patch version bump with no breaking API changes
  • ✅ v3.0.7: ~3.75x faster parsing via inline fast-paths
  • ✅ v3.0.8: Fixed O(N²) issue when SSE events span many chunks

Recommendation: LGTM - Approve and merge after CI passes. The performance improvements are beneficial with zero migration effort.

@github-actions
Copy link
Copy Markdown
Contributor

🤖 pi Response

PR Review Summary

This PR bumps eventsource-parser from 3.0.6 to 3.0.8. Here's my assessment:

Changes in the dependency

  • v3.0.7: ~3.75x faster parsing via inline fast-paths and single-pass line processing
  • v3.0.8: Fixed O(N²) performance issue when SSE events span many chunks

Impact on this codebase

The eventsource-parser library is used in 7 files for SSE stream parsing:

  • 5 source files handling OpenAI, Anthropic, and Gemini streaming
  • 2 test files

All usages follow the standard API pattern: createParser({ onEvent: (event: EventSourceMessage) => {...} }).

Verdict

LGTM - This is a patch version bump with no breaking API changes. The performance improvements (especially for long streaming responses) are beneficial with zero migration effort required.

Recommend approving once CI passes.

@mcowger mcowger merged commit e1c139f into main Apr 20, 2026
2 checks passed
@mcowger mcowger deleted the dependabot/bun/eventsource-parser-3.0.8 branch April 20, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant