Skip to content

chore(deps): dependency sweep — website lockfile freshening - #1230

Open
apify-deps[bot] wants to merge 1 commit into
masterfrom
chore/deps-sweep-2
Open

apify-deps[bot] wants to merge 1 commit into
masterfrom
chore/deps-sweep-2

Conversation

@apify-deps

@apify-deps apify-deps Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Dependency sweep — in-range lockfile freshening for website/pnpm-lock.yaml (pnpm update -r):

  • oxlint ^1.90.0 → ^1.91.0
  • rimraf ^6.1.3 → ^6.1.4
  • plus transitive/peer bumps within existing ranges

No @apify-packages/* dependency in this repo, so the first-party catch-up step doesn't apply. No overrides/resolutions block exists in pnpm-workspace.yaml, so there was nothing to prune.

✅ Dismissed (don't apply to our usage)

  • katex (low) — not_used: only renders our own reviewed docs markdown at build time via micromark-extension-math; we never accept untrusted LaTeX input, so the prototype-pollution trust-bypass is unreachable. (alert #193)
  • re2js (high) — tolerable_risk: no fix available — markdownlint@0.42.0 (latest) exact-pins re2js@2.8.6. Only reachable via pnpm lint:md in CI; the ReDoS is a CI-job DoS only, no code-exec/data access, and fork-PR runs have no secrets. (alert #196)

🚩 Flagged — needs review

  • decode-uri-component 0.4.1 → 0.5.1 (high / medium) — 0.x line jump, out of range for every consumer: pinned by query-string@8.2.0 (latest 8.x line, caps at ^0.4.1) via @apify/ui-library@1.173.0 (latest) via @apify/docs-theme@1.0.279 (latest). Needs a new pnpm override or an upstream query-string major. No tracking PR found. (alert #197, alert #176)
  • tinypool 1.1.1 → 2.1.2 (critical ×2) — major bump needed; pinned by @docusaurus/core@3.10.2 (latest 3.x, declares ^1.0.2). The other copy in the tree (tinypool@2.2.0, via oxfmt) is already past the patched floor. No tracking PR found. (alert #192, alert #191)

Note: branched as chore/deps-sweep-2 — the prior chore/deps-sweep branch's PR (#1113) was already closed, so per convention this sweep used the next suffix instead of reopening it.

🤖 Generated with Claude Code

@apify-deps
apify-deps Bot requested a review from vdusek November 4, 2026 20:23
@apify-deps apify-deps Bot added the adhoc Ad-hoc unplanned task added during the sprint. label Nov 4, 2026
@github-actions github-actions Bot added the t-tooling Issues with this label are in the ownership of the tooling team. label Nov 4, 2026
@codecov

codecov Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.76%. Comparing base (793991b) to head (6c1ad3a).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1230      +/-   ##
==========================================
- Coverage   93.84%   93.76%   -0.08%     
==========================================
  Files          54       54              
  Lines        3800     3800              
==========================================
- Hits         3566     3563       -3     
- Misses        234      237       +3     
Flag Coverage Δ
e2e 31.47% <ø> (ø)
integration 51.39% <ø> (-0.03%) ⬇️
unit 90.94% <ø> (-0.06%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint. t-tooling Issues with this label are in the ownership of the tooling team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants