Repository navigation
fix(deps): bump wrangler to 4.151.1 and pin source-map-js 1.2.2 - #57
Merged
Merged
Conversation
Clears the two open high Dependabot alerts. sharp 0.35.4 came in through wrangler's miniflare; wrangler 4.151.1 brings miniflare 5.20261012.1-beta with sharp 0.35.5, and @cloudflare/workers-types moves to ^5.20261019.1 to match its peer range. source-map-js 1.2.1 came in through postcss and Tailwind with no newer parent release pulling the fix, so it's pinned to 1.2.2 in overrides next to the existing security pins. No release-age exclusions were needed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Clears the repo's two open high Dependabot alerts (sharp, source-map-js).
^4.147.0→^4.151.1. Its miniflare (5.20261012.1-beta) brings sharp 0.35.5.@cloudflare/workers-types→^5.20261019.1inapps/apiandpackages/core, to match the new wrangler's peer range.source-map-js: 1.2.2inpnpm-workspace.yamloverrides, next to the existing security pins. It came in through postcss and Tailwind with no parent release pulling the fix.No release-age exclusions were added: every version is past the minimum age.
This overlaps the wrangler bump inside the grouped Dependabot PR #49, which now conflicts with
mainafter the catch-up. Dependabot will rebase it, and the two won't clash beyond the lockfile.Checks
pnpm install --frozen-lockfileok. Typecheck clean. Tests: api 472, core 415, web 101, importer 63, all passing. Web build ok.wrangler deploy --dry-runwith the example config ok.🤖 Generated with Claude Code