Skip to content

Conversation

@nmontavon
Copy link

  • updates all dependencies within their ranges
  • resolves around 16 audit issues, which would otherwise fail our CI for example

unresolved audits:

Copilot AI review requested due to automatic review settings January 29, 2026 14:21
@changeset-bot
Copy link

changeset-bot bot commented Jan 29, 2026

🦋 Changeset detected

Latest commit: f528688

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 6 packages
Name Type
@layerstack/svelte-actions Patch
@layerstack/svelte-stores Patch
@layerstack/svelte-table Patch
@layerstack/tailwind Patch
@layerstack/utils Patch
@layerstack/docs Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR aims to update all dependencies within their version ranges to resolve approximately 16 audit issues that would otherwise fail CI. The update includes both devDependencies and runtime dependencies across multiple packages in the monorepo.

Changes:

  • Updated numerous development dependencies including build tools, testing frameworks, and SvelteKit packages
  • Updated runtime dependencies including lodash-es, prismjs, immer, zod, and UI libraries
  • Updated wrangler in the root package.json

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated no comments.

Show a summary per file
File Description
sites/docs/package.json Updated 25+ dependencies including SvelteKit, Svelte, TypeScript, Prettier, and various tools
packages/utils/package.json Updated build tools, testing frameworks, and lodash-es dependency
packages/tailwind/package.json Updated similar development dependencies and culori, tailwind-merge packages
packages/svelte-table/package.json Updated build/test dependencies and lodash-es
packages/svelte-stores/package.json Updated dependencies including immer, zod, and lodash-es
packages/svelte-actions/package.json Updated dependencies including @floating-ui/dom and lodash-es
package.json Updated wrangler from 4.14.4 to 4.61.1

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@techniq
Copy link
Owner

techniq commented Jan 29, 2026

Thanks @nmontavon! I just kicked CI and looks like pnpm build is broken due @typescript-eslint/types which is odd...

CleanShot 2026-01-29 at 09 30 39@2x

Also, are you using the latest or next releases of LayerStack? We dropped lodash in next (and is used by layerstack@next and svelte-ux@next)

@nmontavon
Copy link
Author

we're actually using next versions of layerchart, and got an audit for @layerstack/utils regarding lodash-es.

Seems to be a type issue in esrap, this will fix it sveltejs/esrap#99

For now, using skipLibCheck in the tsconfig.json will supress this.

@techniq
Copy link
Owner

techniq commented Jan 30, 2026

we're actually using next versions of layerchart, and got an audit for @layerstack/utils regarding lodash-es.

Seems to be a type issue in esrap, this will fix it sveltejs/esrap#99

For now, using skipLibCheck in the tsconfig.json will supress this.

I see. on the @next version of @layerstack/* packages we've removed lodash-es.

We've also removed lodash-es in layerchart, but it's currently been applied downstream of next in docs-v2 ATM.

If possible, could you:

  • LayerStack: update this PR to target next instead of main. this will remove lodash-es but will add any other updates
  • LayerChart: need to apply a similar PR as Remove lodash-es dependency layerchart#734 against next to allow for a quicker release (we're getting close with docs-v2, but still have more work to do before we can merge)

@github-actions
Copy link
Contributor

github-actions bot commented Jan 30, 2026

built with Refined Cloudflare Pages Action

⚡ Cloudflare Pages Deployment

Name Status Preview Last Commit
layerstack ✅ Ready (View Log) Visit Preview f528688

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants