Skip to content

chore(deps): bump @types/bcryptjs from 2.4.6 to 3.0.0#90

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/types/bcryptjs-3.0.0
Open

chore(deps): bump @types/bcryptjs from 2.4.6 to 3.0.0#90
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bun/types/bcryptjs-3.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Bumps @types/bcryptjs from 2.4.6 to 3.0.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated a TypeScript type package dependency to the latest compatible version.

Bumps [@types/bcryptjs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bcryptjs) from 2.4.6 to 3.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bcryptjs)

---
updated-dependencies:
- dependency-name: "@types/bcryptjs"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Apr 23, 2026

📝 Walkthrough

Walkthrough

A single dependency version update in package.json upgrading the TypeScript type definitions for bcryptjs from version ^2.4.6 to ^3.0.0, with no other changes to the codebase.

Changes

Cohort / File(s) Summary
Dependency Version Update
package.json
Bumped @types/bcryptjs from ^2.4.6 to ^3.0.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically describes the main change: bumping @types/bcryptjs from version 2.4.6 to 3.0.0, which is the only modification in this pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 14: The bump to `@types/bcryptjs`@^3.0.0 may change the typing for the
default import used in src/lib/create-user.ts; verify that the line import
bcrypt from "bcryptjs" and the call bcrypt.hash(password, 10) type-check under
the new types by running tsc, and if it fails either enable esModuleInterop /
allowSyntheticDefaultImports in tsconfig or switch the import to the namespace
form (import * as bcrypt from "bcryptjs") and ensure bcrypt.hash(password, 10)
matches the declared signature; update package.json/types or the import/tsconfig
accordingly to restore correct typing.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: cb1edb64-e840-4958-a025-81494ab485e8

📥 Commits

Reviewing files that changed from the base of the PR and between 612eb64 and 3271a99.

⛔ Files ignored due to path filters (1)
  • bun.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • package.json

Comment thread package.json
"dependencies": {
"@astrojs/starlight": "0.38.3",
"@types/bcryptjs": "^2.4.6",
"@types/bcryptjs": "^3.0.0",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Read-only verification for bcryptjs typing compatibility signals.

set -euo pipefail

echo "== Locate TypeScript config =="
fd -i 'tsconfig*.json'

echo
echo "== Print compiler interop options (if present) =="
fd -i 'tsconfig*.json' -x sh -c '
  f="$1"
  echo "--- $f ---"
  jq ".compilerOptions | {module, moduleResolution, esModuleInterop, allowSyntheticDefaultImports, types}" "$f" 2>/dev/null || cat "$f"
' sh {}

echo
echo "== Find bcryptjs imports and callsites =="
rg -n -C2 --type=ts --type=tsx '\bfrom\s+["'"'"']bcryptjs["'"'"']|require\(["'"'"']bcryptjs["'"'"']\)|\bbcrypt\.(hash|compare|genSalt)\s*\('

echo
echo "== Confirm dependency entries in package.json =="
jq '.dependencies["bcryptjs"], .dependencies["@types/bcryptjs"]' package.json

Repository: tinyauthapp/docs

Length of output: 376


🏁 Script executed:

#!/bin/bash

echo "== Check if src/lib/create-user.ts exists =="
ls -la src/lib/create-user.ts 2>&1 || echo "File does not exist"

echo
echo "== List src/lib directory =="
ls -la src/lib/ 2>&1 || echo "Directory does not exist"

echo
echo "== Check all bcryptjs references in codebase (any file type) =="
rg 'bcryptjs' -i --no-ignore 2>&1 | head -30

echo
echo "== Check package.json for bcryptjs dependencies =="
cat package.json | grep -A5 -B5 'bcryptjs' 2>&1 || echo "Not found in grep"

echo
echo "== Full dependencies section from package.json =="
jq '.dependencies // {}' package.json 2>/dev/null | head -40

Repository: tinyauthapp/docs

Length of output: 2639


🏁 Script executed:

#!/bin/bash

echo "== Content of src/lib/create-user.ts =="
cat -n src/lib/create-user.ts

echo
echo "== Check astro's strict tsconfig settings =="
# Since tsconfig extends astro/tsconfigs/strict, let's check node_modules
if [ -d "node_modules/astro/tsconfigs" ]; then
  cat node_modules/astro/tsconfigs/strict.json 2>/dev/null || echo "File not found in node_modules"
else
  echo "astro tsconfigs directory not found"
fi

echo
echo "== Check if there's an effective tsconfig in .astro/types.d.ts =="
head -30 .astro/types.d.ts 2>/dev/null || echo "File not accessible"

Repository: tinyauthapp/docs

Length of output: 1324


Confirm @types/bcryptjs v3 compatibility with current imports.

The semver-major bump from @types/bcryptjs@2.4.6 (in package-lock.json) to ^3.0.0 may introduce typing changes. Verify that the default import in src/lib/create-user.ts (import bcrypt from "bcryptjs") and the bcrypt.hash(password, 10) call signature remain properly typed with the new types package.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 14, The bump to `@types/bcryptjs`@^3.0.0 may change the
typing for the default import used in src/lib/create-user.ts; verify that the
line import bcrypt from "bcryptjs" and the call bcrypt.hash(password, 10)
type-check under the new types by running tsc, and if it fails either enable
esModuleInterop / allowSyntheticDefaultImports in tsconfig or switch the import
to the namespace form (import * as bcrypt from "bcryptjs") and ensure
bcrypt.hash(password, 10) matches the declared signature; update
package.json/types or the import/tsconfig accordingly to restore correct typing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants