Skip to content

update deps 2 #7328

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 12, 2025
Merged

update deps 2 #7328

merged 1 commit into from
Jun 12, 2025

Conversation

jnsdls
Copy link
Member

@jnsdls jnsdls commented Jun 12, 2025

PR-Codex overview

This PR focuses on updating various dependencies across multiple package.json files and the pnpm-lock.yaml file. The updates include version increments for libraries such as postcss, eslint-plugin-react-compiler, and several others to improve compatibility and performance.

Detailed summary

  • Updated postcss from 8.5.3 to 8.5.5 in multiple packages.
  • Updated eslint-plugin-react-compiler from 19.0.0-beta-e993439-20250405 to 19.1.0-rc.2 in several packages.
  • Updated @confluentinc/kafka-javascript from 1.3.0 to 1.3.2.
  • Updated @vitest/coverage-v8 from 3.1.2 to 3.2.3.
  • Updated vitest from 3.1.4 to 3.2.3.
  • Updated swagger-ui-react from 5.21.0 to 5.24.1.
  • Updated short-unique-id from 5.2.2 to 5.3.2.
  • Updated tinypool from 1.0.2 to 1.1.0.
  • Updated core-js-pure from 3.42.0 to 3.43.0.
  • Updated tree-sitter from 0.22.1 to 0.22.4.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Summary by CodeRabbit

  • Chores
    • Updated various dependencies and development tools across multiple apps and packages to newer versions, including improvements to UI, testing, and build tools.
    • Reformatted some configuration fields for improved clarity.
    • No changes to user-facing features or exported/public interfaces.

Copy link

changeset-bot bot commented Jun 12, 2025

⚠️ No Changeset found

Latest commit: 8044d40

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

vercel bot commented Jun 12, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
docs-v2 ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 12, 2025 6:33am
login ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 12, 2025 6:33am
thirdweb_playground ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 12, 2025 6:33am
thirdweb-www ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 12, 2025 6:33am
wallet-ui ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 12, 2025 6:33am

Copy link
Contributor

coderabbitai bot commented Jun 12, 2025

Walkthrough

Dependency versions were updated across multiple package.json files in various applications and packages. The changes include upgrading versions of development and runtime dependencies such as postcss, eslint-plugin-react-compiler, swagger-ui-react, @confluentinc/kafka-javascript, @vitest/coverage-v8, vitest, and @radix-ui/react-focus-scope. Some minor formatting changes were also made.

Changes

File(s) Change Summary
apps/dashboard/package.json Upgraded swagger-ui-react, eslint-plugin-react-compiler, and postcss versions.
apps/login/package.json
apps/portal/package.json
Upgraded postcss version in devDependencies.
apps/playground-web/package.json
apps/wallet-ui/package.json
Upgraded eslint-plugin-react-compiler and postcss versions in devDependencies.
packages/service-utils/package.json Upgraded @confluentinc/kafka-javascript, @vitest/coverage-v8, and vitest versions.
packages/thirdweb/package.json Reformatted typesVersions field and upgraded @radix-ui/react-focus-scope, @vitest/coverage-v8, and vitest versions.

Sequence Diagram(s)

No sequence diagrams generated as the changes are limited to dependency and formatting updates without modifications to control flow or features.


📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0a85205 and 8044d40.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (7)
  • apps/dashboard/package.json (2 hunks)
  • apps/login/package.json (1 hunks)
  • apps/playground-web/package.json (1 hunks)
  • apps/portal/package.json (1 hunks)
  • apps/wallet-ui/package.json (1 hunks)
  • packages/service-utils/package.json (1 hunks)
  • packages/thirdweb/package.json (4 hunks)
⏰ Context from checks skipped due to timeout of 90000ms (8)
  • GitHub Check: E2E Tests (pnpm, webpack)
  • GitHub Check: E2E Tests (pnpm, esbuild)
  • GitHub Check: E2E Tests (pnpm, vite)
  • GitHub Check: Unit Tests
  • GitHub Check: Size
  • GitHub Check: Build Packages
  • GitHub Check: Lint Packages
  • GitHub Check: Analyze (javascript)
🔇 Additional comments (16)
packages/service-utils/package.json (3)

48-48: Update @confluentinc/kafka-javascript to 1.3.2
Ensure compatibility with Kafka client APIs by reviewing the changelog for any breaking changes and updating integration tests accordingly.


55-55: Bump @vitest/coverage-v8 to 3.2.3
Dependencies align with other packages; verify coverage metrics remain consistent after the update.


57-57: Bump vitest to 3.2.3
Test runner updated to match coverage version; confirm that all tests still pass in CI.

packages/thirdweb/package.json (4)

150-209: Reformat typesVersions entries to multi-line arrays
This is a non-functional, style-only change improving readability; aligns with JSON formatting conventions across the repo.


235-235: Upgrade @radix-ui/react-focus-scope to 1.1.7
Minor patch bump; please review changelog for bug fixes or breaking changes related to focus management.


379-379: Upgrade @vitest/coverage-v8 to 3.2.3
Aligns coverage tooling with service-utils; tests coverage reports should be validated post-upgrade.


405-405: Upgrade vitest to 3.2.3
Ensure compatibility with new runner version across existing test suites and update CI configurations if necessary.

apps/login/package.json (1)

45-45: Bump postcss to 8.5.5
Updating postcss to 8.5.5 keeps devDependencies in sync across applications and pulls in the latest fixes.

apps/portal/package.json (1)

82-82: Bump postcss to 8.5.5
Aligns the postcss version with other frontend apps, ensuring consistency.

apps/wallet-ui/package.json (2)

45-45: Upgrade eslint-plugin-react-compiler to 19.1.0-rc.2
Brings the plugin to the latest candidate release, matching other apps.


47-47: Bump postcss to 8.5.5
Keeps the postcss version in lockstep with peer applications.

apps/playground-web/package.json (2)

60-60: Upgrade eslint-plugin-react-compiler to 19.1.0-rc.2
Updates the compiler plugin across the codebase for consistent linting behavior.


62-62: Bump postcss to 8.5.5
Maintains a unified postcss version across all frontend packages.

apps/dashboard/package.json (3)

101-101: Upgrade swagger-ui-react to ^5.24.1
Pulls in the latest minor release of Swagger UI React for updated API docs rendering.


136-136: Upgrade eslint-plugin-react-compiler to 19.1.0-rc.2
Ensures consistent linting plugin versions across dashboard and related apps.


141-141: Bump postcss to 8.5.5
Synchronizes the postcss version with other application packages.


🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@github-actions github-actions bot added Dashboard Involves changes to the Dashboard. Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. packages Ecosystem Portal Involves changes to the Ecosystem Portal SDK Involves changes to the thirdweb SDK labels Jun 12, 2025
Copy link
Member Author

jnsdls commented Jun 12, 2025


How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

  • merge-queue - adds this PR to the back of the merge queue
  • hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

This was referenced Jun 12, 2025
@jnsdls jnsdls marked this pull request as ready for review June 12, 2025 02:31
@jnsdls jnsdls requested review from a team as code owners June 12, 2025 02:31
Copy link

socket-security bot commented Jun 12, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitest/​coverage-v8@​3.1.2 ⏵ 3.2.39910070 +199 +1100
Updatedvitest@​3.1.4 ⏵ 3.2.398 +11007799100
Updatedpostcss@​8.5.3 ⏵ 8.5.599 +110081 +192100
Updated@​confluentinc/​kafka-javascript@​1.3.0 ⏵ 1.3.294 +1100100 +196 +380
Updatedeslint-plugin-react-compiler@​19.0.0-beta-e993439-20250405 ⏵ 19.1.0-rc.2100 +110091 +197100
Updatedswagger-ui-react@​5.21.0 ⏵ 5.24.198 +110010097 +3100

View full report

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

Copy link
Contributor

github-actions bot commented Jun 12, 2025

size-limit report 📦

Path Size Loading time (3g) Running time (snapdragon) Total time
thirdweb (esm) 62.44 KB (0%) 1.3 s (0%) 298 ms (+185.69% 🔺) 1.6 s
thirdweb (cjs) 350.62 KB (0%) 7.1 s (0%) 967 ms (+7.26% 🔺) 8 s
thirdweb (minimal + tree-shaking) 5.7 KB (0%) 114 ms (0%) 80 ms (+1113.97% 🔺) 194 ms
thirdweb/chains (tree-shaking) 531 B (0%) 11 ms (0%) 33 ms (+573.65% 🔺) 43 ms
thirdweb/react (minimal + tree-shaking) 19.59 KB (0%) 392 ms (0%) 85 ms (+456.49% 🔺) 476 ms

Copy link

codecov bot commented Jun 12, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 55.57%. Comparing base (0a85205) to head (8044d40).
Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7328      +/-   ##
==========================================
- Coverage   55.57%   55.57%   -0.01%     
==========================================
  Files         909      909              
  Lines       58675    58675              
  Branches     4162     4162              
==========================================
- Hits        32610    32609       -1     
- Misses      25958    25959       +1     
  Partials      107      107              
Flag Coverage Δ
packages 55.57% <ø> (-0.01%) ⬇️

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@jnsdls jnsdls force-pushed the 06-11-update_deps_2 branch from 9424247 to 34f9976 Compare June 12, 2025 02:40
@jnsdls jnsdls force-pushed the 06-11-update_storybook branch from 4fb953e to dea5774 Compare June 12, 2025 02:40
cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

@jnsdls jnsdls force-pushed the 06-11-update_deps_2 branch from 34f9976 to f069a7a Compare June 12, 2025 04:05
@jnsdls jnsdls force-pushed the 06-11-update_storybook branch from dea5774 to 9b5d625 Compare June 12, 2025 04:05
cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

@jnsdls jnsdls force-pushed the 06-11-update_deps_2 branch from 6a28c96 to 8044d40 Compare June 12, 2025 06:25
Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ BugBot reviewed your changes and found no bugs!


Was this report helpful? Give feedback by reacting with 👍 or 👎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dashboard Involves changes to the Dashboard. Ecosystem Portal Involves changes to the Ecosystem Portal packages Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. SDK Involves changes to the thirdweb SDK
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant