Skip to content

Conversation

@RomneyDa
Copy link
Collaborator

@RomneyDa RomneyDa commented Nov 18, 2025

Description

Conglomeration of snyk recent updates since many failed to update package lock and will have tons of conflicts, plus need to pull main for all


Summary by cubic

Updated dependencies across the repo to resolve Snyk alerts and keep SDKs current. Key bumps: google-auth-library 10.x, Puppeteer 24.x, OpenAI 5.23.x, Zod 3.25.x, and YAML 2.8.x.

  • Dependencies
    • Applied across core, extensions/cli, packages/openai-adapters, packages/config-yaml, and docs.
    • Added js-yaml (hub, CLI) and axios + tar-fs (docs).

Written for commit 440b228. Summary will update automatically on new commits.

@RomneyDa RomneyDa requested a review from a team as a code owner November 18, 2025 18:03
@RomneyDa RomneyDa requested review from tingwai and removed request for a team November 18, 2025 18:03
@dosubot dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Nov 18, 2025
@RomneyDa RomneyDa marked this pull request as draft November 18, 2025 18:03
@github-actions
Copy link

github-actions bot commented Nov 18, 2025

✅ Review Complete

Code Review Summary

⚠️ Continue configuration error. Please verify that the assistant exists in Continue Hub.


Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 1 file

Prompt for AI agents (all 1 issues)

Understand the root cause of the following 1 issues and fix them.


<file name="packages/config-yaml/package.json">

<violation number="1" location="packages/config-yaml/package.json:27">
The dependency was bumped to ^2.8.1 here without updating packages/config-yaml/package-lock.json, so installs remain pinned to ^2.6.1 and the intended upgrade won’t ship. Refresh the lock file after changing dependency versions.</violation>
</file>

Reply to cubic to teach it or ask questions. Re-run a review with @cubic-dev-ai review this PR

@RomneyDa RomneyDa changed the title fix: config yaml bump chore: dependency bumps Nov 18, 2025
@RomneyDa RomneyDa marked this pull request as ready for review November 18, 2025 18:24
@dosubot dosubot bot added size:S This PR changes 10-29 lines, ignoring generated files. and removed size:XS This PR changes 0-9 lines, ignoring generated files. labels Nov 18, 2025
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 12 files

tingwai
tingwai previously approved these changes Nov 18, 2025
@dosubot dosubot bot added the lgtm This PR has been approved by a maintainer label Nov 18, 2025
@github-project-automation github-project-automation bot moved this from Todo to In Progress in Issues and PRs Nov 18, 2025
@RomneyDa RomneyDa merged commit b11c958 into main Nov 19, 2025
56 of 60 checks passed
@RomneyDa RomneyDa deleted the dallin/super-snyk branch November 19, 2025 01:09
@github-project-automation github-project-automation bot moved this from In Progress to Done in Issues and PRs Nov 19, 2025
@github-actions github-actions bot locked and limited conversation to collaborators Nov 19, 2025
@sestinj
Copy link
Contributor

sestinj commented Nov 19, 2025

🎉 This PR is included in version 1.34.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@sestinj
Copy link
Contributor

sestinj commented Nov 19, 2025

🎉 This PR is included in version 1.30.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@sestinj
Copy link
Contributor

sestinj commented Nov 19, 2025

🎉 This PR is included in version 1.5.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@sestinj
Copy link
Contributor

sestinj commented Nov 20, 2025

🎉 This PR is included in version 1.6.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

lgtm This PR has been approved by a maintainer released size:S This PR changes 10-29 lines, ignoring generated files.

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

4 participants