You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
chore(deps): update security dependencies in examples and integrations - #12509
Update security-related dependencies in examples and integrations within their current major versions. Refresh vulnerable transitive dependencies within the existing ranges.
Next.js 14, 15, and 16 remain separate test targets and now use 14.2.35, 15.5.28, and 16.4.4. Keep the workspace's 24-hour release delay and Expo's supported dependency versions.
Some security findings remain in legacy versions and pinned transitive dependencies. This update does not add overrides or change major versions.
Checks pass with Node.js 24.22.1. These include pnpm run test:pr, the frozen lockfile check, formatting checks, and expo install --check.
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types
No actionable comments were generated in the recent review.
Walkthrough
Package manifests across Preact, React, and Solid examples and framework integrations update dependency version ranges. No application code or public declarations changed.
Changes: Dependency updates
Layer / File(s)
Summary
Preact and React example dependencies examples/preact/*/package.json, examples/react/*/package.json
Updated compression, @vitejs/plugin-react, Next.js, Expo, and React Native dependency ranges.
Solid example dependencies examples/solid/*/package.json
Updated ranges for Solid packages, routers, SolidStart, Vite, Astro, and Tailwind CSS.
No concrete merge-blocking issue is identified in these example and integration dependency updates. Mergeable subject to normal dependency and build checks.
Pre-merge checks: 5
Check name
Status
Explanation
Title check
The title clearly summarizes the dependency updates across examples and integrations. It is concise and related to the primary change.
Description check
The description includes the required Changes, Checklist, and Release Impact sections. It explains the dependency updates, records test results, completes the checklist, and identifies the change as d…
Docstring Coverage
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Full details: Description check
Explanation
The description includes the required Changes, Checklist, and Release Impact sections. It explains the dependency updates, records test results, completes the checklist, and identifies the change as dev-only with no release impact.
Full details: Docstring Coverage
Explanation
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (60 skipped: 60 unsupported.)
Finishing Touches
Generate unit tests (beta)
Commit to this branch
Create a new PR
Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🎯 Changes
Update security-related dependencies in
examplesandintegrationswithin their current major versions. Refresh vulnerable transitive dependencies within the existing ranges.Next.js 14, 15, and 16 remain separate test targets and now use 14.2.35, 15.5.28, and 16.4.4. Keep the workspace's 24-hour release delay and Expo's supported dependency versions.
Some security findings remain in legacy versions and pinned transitive dependencies. This update does not add overrides or change major versions.
Checks pass with Node.js 24.22.1. These include
pnpm run test:pr, the frozen lockfile check, formatting checks, andexpo install --check.✅ Checklist
pnpm run test:pr, or these tests do not apply to this pull request.🚀 Release Impact
Summary by CodeRabbit