Skip to content

chore(deps): dependency sweep — website lockfile freshening - #1050

Merged
B4nan merged 1 commit into
masterfrom
chore/deps-sweep
Sep 7, 2026
Merged

chore(deps): dependency sweep — website lockfile freshening#1050
B4nan merged 1 commit into
masterfrom
chore/deps-sweep

Conversation

@apify-deps

@apify-deps apify-deps Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Summary

Dependency sweep — in-range freshening of website/pnpm-lock.yaml (@apify/ui-library 1.164.8 → 1.164.9, oxlint ^1.80.0 → ^1.81.0, plus a few new @types/* transitives; no other declared ranges changed).

✅ Dismissed (don't apply to our usage)

  • qs (medium) — tolerable_risk: pulled only via webpack-dev-server → express → body-parser, used exclusively by local pnpm start (dev server), never invoked in CI (CI only runs docusaurus build). No fix available in the express/body-parser 4.x line (declared range ~6.15.1 excludes the patched 6.16.0; no newer 4.x release exists). (alert #159)
  • qs (medium) — same rationale as above (array-limit bypass variant). (alert #160)

🚩 Flagged — needs review

  • decode-uri-component 0.4.10.5.0 (medium) — new override needed. Pulled via query-string@8.2.0 (still latest 8.x, declares ^0.4.1) → @apify/ui-library@1.164.9 (latest, still declares ^8.1.0 for query-string) → @apify/docs-theme's search modal, which runs client-side in the deployed docs site (real runtime path, not dev-only). No in-range fix exists: decode-uri-component@0.5.0 needs a new pnpm override (query-string's declared range excludes it), or a query-string major bump to 9.x (which itself violates @apify/ui-library's declared ^8.1.0 range). No tracking PR found. (alert #158)

🤖 Generated with Claude Code

@apify-deps apify-deps Bot added the adhoc Ad-hoc unplanned task added during the sprint. label Sep 7, 2026
@apify-deps
apify-deps Bot requested a review from B4nan September 7, 2026 01:08
@codecov

codecov Bot commented Sep 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.24%. Comparing base (4737484) to head (d4e0b0f).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1050      +/-   ##
==========================================
+ Coverage   87.34%   95.24%   +7.89%     
==========================================
  Files          59       59              
  Lines        5509     5509              
==========================================
+ Hits         4812     5247     +435     
+ Misses        697      262     -435     
Flag Coverage Δ
integration 92.19% <ø> (?)
unit 87.34% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@B4nan
B4nan merged commit 9310823 into master Sep 7, 2026
30 checks passed
@B4nan
B4nan deleted the chore/deps-sweep branch September 7, 2026 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

adhoc Ad-hoc unplanned task added during the sprint.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants