chore(deps): combined frontend dependency bumps (supersedes #774-#778) - #779
Merged
Merged
Conversation
Combines the open Dependabot npm updates into a single change: - @hookform/resolvers 5.7.1 -> 5.9.1 (#775) - @radix-ui/react-avatar 1.1.11 -> 1.2.6 (#776) - @types/node 26.5.0 -> 26.6.2 (#777) - react-hook-form 7.71.2 -> 7.88.0 (#778) - react-resizable-panels 4.12.3 -> 4.13.2 (#774) Both app/package-lock.json and the root package-lock.json are regenerated, since the root package links the frontend via "queryweaver-app": "file:app". Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
|
Navigate logical layers of code changes, visualize relationships, and explore their blast radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (2)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review. 📝 WalkthroughWalkthroughThe app package manifest now specifies newer version ranges for five dependencies: ChangesFrontend dependency updates
Priority: ⬇️ Low Estimated code review effort: 1 (Trivial) | ~5 minutes Change: Other Suggested reviewers: Merge Risk: ⚪ Minimal · up to Both lockfiles align with the updated dependency ranges, including the panel version targeted for its reported fixes. No concrete merge-blocking issue remains. 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
Full details: Out of Scope Changes checkExplanation Issue
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Dependency ReviewThe following issues were found:
OpenSSF ScorecardScorecard details
Scanned Files
|
Contributor
There was a problem hiding this comment.
Copilot review overview
🟢 Approval recommended
No unresolved issues were identified.
Review effort: Lite
Findings: None
What changed in this PR
Updates frontend dependencies and synchronizes both npm lockfiles for CI and local installs.
Changes:
- Bumps five frontend dependencies.
- Regenerates app and root lockfiles.
- No application source changes.
| File | Description |
|---|---|
package-lock.json |
Synchronized root dependency graph |
app/package.json |
Updated frontend dependency ranges |
app/package-lock.json |
Locked updated frontend and transitive dependencies |
Files not reviewed (1)
- app/package-lock.json: Generated file
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This was referenced Sep 23, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Combines all open Dependabot npm PRs into a single change so CI runs once.
@hookform/resolvers@radix-ui/react-avatar@types/node(dev)react-hook-formreact-resizable-panelsBoth
app/package-lock.jsonand the rootpackage-lock.jsonare regenerated, since the root package links the frontend via"queryweaver-app": "file:app"and E2E runsnpm ciat both levels.Validation
npm ciat root and inapp/— OKnpm run build(Vite production build) — OKnpm run lint(ESLint) — OKtsc --noEmit— no source type errorsOnce merged, Dependabot will close #774, #775, #776, #777 and #778 automatically.
Summary by CodeRabbit