Skip to content

chore(deps): address dependabot issues - #359

Merged
Vadman97 merged 9 commits into
mainfrom
vadim/security
Feb 5, 2026
Merged

Vadman97 merged 9 commits into
mainfrom
vadim/security

Conversation

@Vadman97

@Vadman97 Vadman97 commented Feb 3, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Address dependabot alerts.

How did you test this change?

local testing

Screenshot 2026-02-03 at 13 36 16

Are there any deployment considerations?


Note

Medium Risk
Mostly dependency and tooling upgrades (notably ESLint v9 and Next.js 15.5) that can change lint/build behavior across multiple example apps. Small runtime behavior change in withHighlightConfig rewrite handling could affect Next.js routing defaults if consumers relied on undefined fields.

Overview
Updates dependencies across the monorepo to address alerts, including bumping hono, next/eslint-config-next, and standardizing several packages on ESLint v9 with @eslint/js/typescript-eslint.

Migrates E2E apps’ ESLint setup to the new flat config format (eslint.config.*) for NestJS, React Router, and React Three Vite, and simplifies the React Native example to use Expo’s ESLint config.

Fixes @highlight-run/next’s withHighlightConfig rewrite wrapping to tolerate partial/undefined rewrite objects by defaulting missing beforeFiles/afterFiles/fallback arrays, with an updated test expectation. Also tightens top-level Yarn resolutions (e.g., react-server-dom-webpack, p-limit family, diff, tar) and bumps Python dev dependency constraints/locks (notably Django).

Written by Cursor Bugbot for commit 34b8ceb. This will update automatically on new commits. Configure here.

@Vadman97
Vadman97 requested a review from a team as a code owner February 3, 2026 21:19
@github-actions

github-actions Bot commented Feb 3, 2026 •

Copy link
Copy Markdown
Contributor

☂️ Python Coverage

current status: ✅

Overall Coverage

Lines Covered Coverage Threshold Status
628 551 88% 0% 🟢

New Files

No new covered files...

Modified Files

No covered modified files...

updated for commit: 34b8ceb by action🐍

Comment thread e2e/nestjs/eslint.config.mjs Resolved
Comment thread e2e/react-native/package.json Resolved
Comment thread e2e/remix/package.json Resolved
Comment thread e2e/react-router/package.json Resolved
Comment thread e2e/react-three-vite/package.json Resolved
@Vadman97 Vadman97 changed the title security: address dependabot issues feat: address dependabot issues Feb 3, 2026
@Vadman97
Vadman97 enabled auto-merge (squash) February 4, 2026 20:28
@Vadman97 Vadman97 changed the title feat: address dependabot issues chore(deps): address dependabot issues Feb 4, 2026
Comment thread e2e/react-router/package.json Resolved
Comment thread e2e/nestjs/eslint.config.mjs Resolved
Comment thread e2e/react-three-vite/package.json Resolved
Comment thread e2e/react-native/eslint.config.js Resolved

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

@Vadman97
Vadman97 merged commit ca1130c into main Feb 5, 2026
24 of 25 checks passed
@Vadman97
Vadman97 deleted the vadim/security branch February 5, 2026 04:30
Vadman97 pushed a commit that referenced this pull request Feb 12, 2026
🤖 I have created a release *beep* *boop*
---


<details><summary>launchdarkly-observability-python: 1.1.0</summary>

##
[1.1.0](launchdarkly-observability-python-1.0.0...launchdarkly-observability-python-1.1.0)
(2026-02-12)


### Features

* address dependabot issues
([#359](#359))
([ca1130c](ca1130c))
</details>

<details><summary>launchdarkly-observability-android: 0.25.1</summary>

##
[0.25.1](launchdarkly-observability-android-0.25.0...launchdarkly-observability-android-0.25.1)
(2026-02-12)


### Bug Fixes

* release package by trigger new build
([#364](#364))
([7eaf5cd](7eaf5cd))
* Trigger release / Code comments change
([#363](#363))
([06b34da](06b34da))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Release/version and documentation-only changes; no functional code
changes are included in this diff.
> 
> **Overview**
> Updates release metadata to publish new versions of the Android and
Python observability SDKs.
> 
> Bumps `sdk/@launchdarkly/observability-android` to `0.25.1` (manifest
+ `gradle.properties`) and records two release-trigger bugfix entries in
`CHANGELOG.md`. Bumps `sdk/@launchdarkly/observability-python` to
`1.1.0` (manifest + `pyproject.toml`), updates `PROVENANCE.md`’s
verification example version, and adds a changelog entry noting
dependency-related updates.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
4cece0b. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants