Skip to content

[pull] master from apify:master - #281

Merged
pull[bot] merged 4 commits into
code:masterfrom
apify:master
Sep 2, 2026
Merged

[pull] master from apify:master#281
pull[bot] merged 4 commits into
code:masterfrom
apify:master

Conversation

@pull

@pull pull Bot commented Sep 2, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

apify-deps Bot and others added 4 commits September 2, 2026 10:17
…4095)

## Summary
Dependency sweep — targeted security bump (in existing range):
- `@opentelemetry/sdk-node` 0.210.0 → 0.217.0 (high severity)

The broad lockfile-refresh pass was dropped for this run: it bumped
`oxlint`
1.62→1.80, whose stricter default lint rules surfaced ~50 new errors in
unrelated files, so only the essential security bump + override prune
are
included to keep the build green.

## 🧹 Pruned overrides (no longer needed)
- `playwright-core` — no-op: resolves to the same `1.61.1` without it
(tracks the `playwright` pin already).
- `@browserbasehq/stagehand` — no-op: resolves to the same `3.0.7`
without it (already pinned by the direct devDependency).
- `tmp` — no-op: resolves to the same `0.2.7` without it.
- `form-data` — no-op: resolves to the same `4.0.6` without it.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: apify-deps[bot] <4649591+apify-deps[bot]@users.noreply.github.com>
…on (#4093)

A crawler started from inside another crawler's request handler no
longer inherits that request's storage transaction and cancellation
signal.

Fixes #4071
…#4098)

The canary and `pin-versions` steps in `scripts/copy.ts` only rewrote
`dependencies`. `@crawlee/impit-client` is an optional dep declared as
`workspace:^`, so it went out as a floating `^4.0.0-beta.N` range.
Because `rc` sorts above `beta` in semver, that range resolves to
`4.0.0-rc.0` today, even when the user has `@crawlee/basic` pinned to an
exact beta.

Both steps now share one helper that also walks `optionalDependencies`,
so optional internal deps get the same pinned version as everything
else.
@pull pull Bot locked and limited conversation to collaborators Sep 2, 2026
@pull pull Bot added the ⤵️ pull label Sep 2, 2026
@pull
pull Bot merged commit 5656fed into code:master Sep 2, 2026
7 of 8 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants