Bump the frontend-security-and-maintenance group across 1 directory with 14 updates - #12
Closed
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
❌ Deploy Preview for hafa-code failed.
|
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| "lucide-react": "^1.14.0", | ||
| "monaco-editor": "0.55.1", | ||
| "lucide-react": "^1.28.0", | ||
| "monaco-editor": "0.56.0", |
There was a problem hiding this comment.
When the frontend production build uses Monaco 0.56.0, the five monaco-editor/esm/vs/... worker imports in web/src/main.tsx target paths removed by the package's reorganized exports, causing Vite to fail module resolution and block the build.
Prompt To Fix With AI
This is a comment left during a code review.
Path: web/package.json
Line: 21
Comment:
**Monaco worker imports no longer resolve**
When the frontend production build uses Monaco 0.56.0, the five `monaco-editor/esm/vs/...` worker imports in `web/src/main.tsx` target paths removed by the package's reorganized exports, causing Vite to fail module resolution and block the build.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
Comment on lines
+42
to
+43
| "typescript": "~7.0.2", | ||
| "typescript-eslint": "^8.66.0", |
There was a problem hiding this comment.
When CI installs TypeScript 7.0.2 alongside typescript-eslint 8.66.0, it violates the lint toolchain's declared TypeScript range of >=4.8.4 <6.1.0, causing dependency installation or the configured ESLint workflow to fail.
Prompt To Fix With AI
This is a comment left during a code review.
Path: web/package.json
Line: 42-43
Comment:
**TypeScript exceeds lint tool support**
When CI installs TypeScript 7.0.2 alongside typescript-eslint 8.66.0, it violates the lint toolchain's declared TypeScript range of `>=4.8.4 <6.1.0`, causing dependency installation or the configured ESLint workflow to fail.
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-692a84891a
branch
from
August 7, 2026 11:19
a42a486 to
e7b6102
Compare
…ith 14 updates Bumps the frontend-security-and-maintenance group with 13 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [@ruby/3.3-wasm-wasi](https://github.com/ruby/ruby.wasm) | `2.9.3-2.9.4` | `2.10.1` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.26.0` | `1.28.0` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` | | [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `26.1.2` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.0.5` | | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.9.0` | | [jsdom](https://github.com/jsdom/jsdom) | `26.1.0` | `30.0.1` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.66.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.2.0` | Updates `@ruby/3.3-wasm-wasi` from 2.9.3-2.9.4 to 2.10.1 - [Release notes](https://github.com/ruby/ruby.wasm/releases) - [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1) Updates `@ruby/wasm-wasi` from 2.9.3-2.9.4 to 2.10.1 - [Release notes](https://github.com/ruby/ruby.wasm/releases) - [Commits](https://github.com/ruby/ruby.wasm/commits/2.10.1) Updates `lucide-react` from 1.26.0 to 1.28.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.28.0/packages/lucide-react) Updates `monaco-editor` from 0.55.1 to 0.56.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0) Updates `@testing-library/user-event` from 14.6.1 to 14.6.3 - [Release notes](https://github.com/testing-library/user-event/releases) - [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md) - [Commits](testing-library/user-event@v14.6.1...v14.6.3) Updates `@types/node` from 24.13.3 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.17 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitejs/plugin-react` from 6.0.4 to 6.0.5 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react) Updates `globals` from 17.7.0 to 17.9.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.9.0) Updates `jsdom` from 26.1.0 to 30.0.1 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v26.1.0...v30.0.1) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.65.0 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) Updates `vite` from 8.0.16 to 8.2.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite) --- updated-dependencies: - dependency-name: "@ruby/3.3-wasm-wasi" dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@ruby/wasm-wasi" dependency-version: 2.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: "@testing-library/user-event" dependency-version: 14.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-security-and-maintenance - dependency-name: globals dependency-version: 17.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: jsdom dependency-version: 30.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: lucide-react dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: monaco-editor dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-security-and-maintenance - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance - dependency-name: vite dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-security-and-maintenance ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-692a84891a
branch
from
August 8, 2026 14:34
e7b6102 to
be2c6b6
Compare
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/web/frontend-security-and-maintenance-692a84891a
branch
August 15, 2026 14:33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the frontend-security-and-maintenance group with 13 updates in the /web directory:
2.9.3-2.9.42.10.11.26.01.28.00.55.10.56.014.6.114.6.324.13.326.1.219.2.1719.2.1819.2.319.2.46.0.46.0.517.7.017.9.026.1.030.0.16.0.37.0.28.65.08.66.08.0.168.2.0Updates
@ruby/3.3-wasm-wasifrom 2.9.3-2.9.4 to 2.10.1Release notes
Sourced from @ruby/3.3-wasm-wasi's releases.
Commits
Updates
@ruby/wasm-wasifrom 2.9.3-2.9.4 to 2.10.1Release notes
Sourced from @ruby/wasm-wasi's releases.
Commits
Updates
lucide-reactfrom 1.26.0 to 1.28.0Release notes
Sourced from lucide-react's releases.
Commits
Updates
monaco-editorfrom 0.55.1 to 0.56.0Release notes
Sourced from monaco-editor's releases.
... (truncated)
Changelog
Sourced from monaco-editor's changelog.
Commits
13f0c87Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)b5f23a3Merge pull request #5396 from microsoft/hediet/b/release-0.56.09d053abImprove Monaco Editor 0.56.0 changelog0ba33d0Release Monaco Editor 0.56.06d961b1Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)d8c9ff0Removes leftover debugger statements. (#5379)59285abfixes pipeline (#5376)aaf58dbBump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)d8ac38eBump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)874af57Bump undici from 7.24.7 to 7.28.0 (#5371)Updates
@testing-library/user-eventfrom 14.6.1 to 14.6.3Release notes
Sourced from @testing-library/user-event's releases.
Commits
1d18b1ffix(release): manually release a patch version (#1321)232f3e6docs: add migration note and clean up README badges (#1320)83e2b22ci: remove deprecated CodeSandbox CI (#1318)e8da819ci: publish to npm via OIDC trusted publishing (#1317)13fa4bcci: stop lint errors from blocking release (#1316)c3cec18chore(ci): make releases work with full git history (#1315)ebab6c6add Liadshiran as a contributor for doc (#1300)ec470bfdocs: fix wrong default enum value (#1298)ba79c2fchore: upgrade node version in csb (#1299)63ac399fix: allow reassignment ofHTMLElement.prototype.focusand.blur(#1265)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@testing-library/user-eventsince your current version.Updates
@types/nodefrom 24.13.3 to 26.1.2Commits
Updates
@types/reactfrom 19.2.17 to 19.2.18Commits
Updates
@types/react-domfrom 19.2.3 to 19.2.4Commits
Updates
@vitejs/plugin-reactfrom 6.0.4 to 6.0.5Release notes
Sourced from @vitejs/plugin-react's releases.
Changelog
Sourced from @vitejs/plugin-react's changelog.
Commits
68c0cb8release: plugin-react@6.0.5 (#1362)555cdbcfix(react): make the react compiler preset filter linear (#1353)a00a9f8fix(deps): update all non-major dependencies (#1327)Updates
globalsfrom 17.7.0 to 17.9.0Release notes
Sourced from globals's releases.
Commits
8e7b93517.9.05a958edUpdate globals (2026-08-01) (#348)36c765917.8.07394811Update globals (2026-07-01) (#347)Updates
jsdomfrom 26.1.0 to 30.0.1Release notes
Sourced from jsdom's releases.
... (truncated)
Commits
658448530.0.10c51df6Update dependencies and dev dependencies32adb34Bump@asamuzakjp/dom-selector70f014aSpeed up range operations on large documents250d7eePartially fix getComputedStyle with calc()20a01fc30.0.08c8e583Precompute WPT expectation matchesf32245cBump Node.js floor and dependencies03ef23bAdd background-position longhandsded056fTest CSS.escape() with numeric IDsMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
typescriptfrom 6.0.3 to 7.0.2Commits
Maintainer changes
This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.
Updates
typescript-eslintfrom 8.65.0 to 8.66.0Release notes
Sourced from typescript-eslint's releases.
Changelog
Sourced from typescript-eslint's changelog.
Commits
e51b11bchore(release): publish 8.66.0Updates
vitefrom 8.0.16 to 8.2.0Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
24a611frelease: v7.2.42d66b7bfix: revert "perf(deps): replace debug with obug (#21107)"a668014release: v7.2.3acfe939perf(deps): replace debug with obug (#21107)4f8171efix(deps): update all non-major dependencies (#21128)5029720chore(deps): update rolldown-related dependencies (#21127)5909efdfix: allow multiplebindCLIShortcutscalls with shortcut merging (#21103)39a0a15chore(deps): update rolldown-related dependencies (#21095)6a34ac3fix(deps): update all non-major dependencies (#21096)02ceaecchore(deps): update dependency@rollup/plugin-commonjsto v29 (#21099)Greptile Summary
This PR updates the frontend dependency group and regenerates its lockfile.
web/package-lock.json.Confidence Score: 3/5
The PR does not appear safe to merge because the production build cannot resolve Monaco’s existing worker imports and the lint toolchain remains paired with an unsupported TypeScript version.
Monaco 0.56.0 still receives five legacy worker subpaths that its exports map resolves to nonexistent files, and TypeScript 7.0.2 still exceeds the peer range declared by typescript-eslint 8.66.0 and its parser.
Files Needing Attention: web/package.json, web/package-lock.json, web/src/main.tsx
Important Files Changed
Reviews (3): Last reviewed commit: "Bump the frontend-security-and-maintenan..." | Re-trigger Greptile