fix(deps): bump the npm-major group with 2 updates - #6097
Conversation
Bumps the npm-major group with 2 updates: [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) and [tldts](https://github.com/remusao/tldts). Updates `@swc/core` from 1.15.46 to 1.15.47 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.15.47/packages/core) Updates `tldts` from 6.1.86 to 7.4.9 - [Release notes](https://github.com/remusao/tldts/releases) - [Changelog](https://github.com/remusao/tldts/blob/master/CHANGELOG.md) - [Commits](remusao/tldts@v6.1.86...v7.4.9) --- updated-dependencies: - dependency-name: "@swc/core" dependency-version: 1.15.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-major - dependency-name: tldts dependency-version: 7.4.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![supabase-cli-releaser[bot]](https://avatars.githubusercontent.com/u/54469796?s=60&v=4){kind=small}
Supabase CLI previewnpx --yes https://pkg.pr.new/supabase/cli/supabase@70967787b8f2c5c614068bed500e844696497349Preview package for commit |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 70967787b8
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@nx/devkit": "^23.0.2" | ||
| "@swc-node/register": "^1.12.1" | ||
| "@swc/core": "^1.15.46" | ||
| "@swc/core": "^1.15.47" |
There was a problem hiding this comment.
This raises the catalog floor to ^1.15.47, but the workspace still sets minimumReleaseAge: 10200 (about 7 days) and pnpm documents that this is the number of minutes after publish before it will install a version (https://pnpm.io/supply-chain-security#delay-dependency-updates). As of this review, npm still reports @swc/core 1.15.47 as published only a few days ago, so a fresh resolution has no older version satisfying ^1.15.47 and either bypasses the repo's supply-chain delay through the committed lockfile or fails when the lockfile must be regenerated; please wait for the version to age past the window or explicitly exclude it if this update is intended to bypass the gate.
Useful? React with 👍 / 👎.
Bumps the npm-major group with 2 updates: @swc/core and tldts.
Updates
@swc/corefrom 1.15.46 to 1.15.47Changelog
Sourced from @swc/core's changelog.
... (truncated)
Commits
0febbbachore: Publish1.15.47withswc_corev75.0.068abe42chore: Publish1.15.47-nightly-20260729.1withswc_corev75.0.0Updates
tldtsfrom 6.1.86 to 7.4.9Release notes
Sourced from tldts's releases.
... (truncated)
Changelog
Sourced from tldts's changelog.
... (truncated)
Commits
a6a2c3bBump version to: v7.4.9 [skip ci]8ff6172Update CHANGELOG.md [skip ci]dd8ccdcUpdate upstream public suffix list (#2636)e46ca7aBump version to: v7.4.8 [skip ci]a4823cdUpdate CHANGELOG.md [skip ci]86a0a57Update upstream public suffix list (#2632)c43f3f1Bump version to: v7.4.7 [skip ci]22e72c3Update CHANGELOG.md [skip ci]44a567cUpdate upstream public suffix list (#2630)92ee2b3Bump version to: v7.4.6 [skip ci]Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for tldts since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions