Add ccusage dependencies - #429
Conversation
- Add @ccusage/codex v17.2.0 - Add @ccusage/mcp v17.2.0 - Add ccusage v17.2.0 - Update related dependencies via bun.lock
|
You do not have enough credits to review this pull request. Please purchase more credits to continue. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
📝 WalkthroughSummary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings. WalkthroughThree new dependencies added to Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes
Poem
Pre-merge checks and finishing touches✅ Passed checks (3 passed)
✨ Finishing touches🧪 Generate unit tests (beta)
📜 Recent review detailsConfiguration used: Organization UI Review profile: CHILL Plan: Pro Disabled knowledge base sources:
⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
🧰 Additional context used📓 Path-based instructions (4)**/*.{js,ts,jsx,tsx,json}📄 CodeRabbit inference engine (CLAUDE.md)
Files:
**/*.{json,yaml,yml,toml}📄 CodeRabbit inference engine (.cursor/rules/formatting.mdc)
Files:
**/*.{js,jsx,ts,tsx,json}📄 CodeRabbit inference engine (.cursor/rules/formatting.mdc)
Files:
**/*.{js,jsx,ts,tsx,json,jsonc,md}📄 CodeRabbit inference engine (.cursor/rules/general.mdc)
Files:
🧠 Learnings (1)📚 Learning: 2025-11-25T09:34:40.062ZApplied to files:
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (15)
🔇 Additional comments (3)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary of ChangesHello @shunkakinoki, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request integrates the Highlights
🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console. Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
Mesa DescriptionTL;DRAdd ccusage dependencies for code coverage analysis and MCP integration. What changed?
Description generated by Mesa. Update settings |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request adds the ccusage suite of tools to the project's dependencies. While the changes are mostly correct, I've identified a couple of points to address. Firstly, the new ccusage dependencies provide command-line tools but haven't been added to trustedDependencies in package.json. This is a high-severity issue as Bun requires this to run installation scripts, and the tools may not function correctly without it. Secondly, a transitive dependency, mime-types, has been upgraded across a major version (v2 to v3), which introduces a medium-severity risk of breaking changes in other parts of the application. Please see my detailed comments for more information on both points.
| "@ccusage/codex": "^17.2.0", | ||
| "@ccusage/mcp": "^17.2.0", | ||
| "@getgrit/cli": "^0.1.0-alpha.1743007075", | ||
| "@github/copilot": "^0.0.369", | ||
| "@google/jules": "^0.1.40", | ||
| "@nanocollective/nanocoder": "^1.16.3", | ||
| "@pulumi/pulumi": "^3.212.0", | ||
| "@sourcegraph/amp": "^0.0.1764893126-gb1ffc3", | ||
| "@typescript/native-preview": "^7.0.0-dev.20251127.1", | ||
| "ccusage": "^17.2.0", |
There was a problem hiding this comment.
The new dependencies @ccusage/codex, @ccusage/mcp, and ccusage provide CLI tools (as seen from the bin entries in bun.lock). Bun's security model requires that packages with lifecycle scripts (often used to set up such tools) be explicitly trusted. To ensure these tools are installed correctly and are functional, please add all three ccusage packages to the trustedDependencies array in this file.
| "mime-db": ["mime-db@1.54.0", "", {}, "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ=="], | ||
|
|
||
| "mime-types": ["mime-types@2.1.35", "", { "dependencies": { "mime-db": "1.52.0" } }, "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw=="], | ||
| "mime-types": ["mime-types@3.0.2", "", { "dependencies": { "mime-db": "^1.54.0" } }, "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A=="], |
There was a problem hiding this comment.
This PR introduces a major version bump for the transitive dependency mime-types (from 2.1.35 to 3.0.2). This carries a risk of introducing breaking changes that could affect other parts of the application relying on this package.
There was a problem hiding this comment.
Pull request overview
This PR adds the ccusage tool suite (version 17.2.0) to enable code coverage analysis and Model Context Protocol (MCP) integration for AI assistants. The changes include adding three new packages to dependencies and updating the lock file with all transitive dependencies.
- Adds @ccusage/codex, @ccusage/mcp, and ccusage packages at version 17.2.0
- Updates bun.lock with new transitive dependencies including @hono/mcp, gunshi, nano-spawn, args-tokens, and upgraded mime-types/mime-db versions
- Resolves zod v4.2.1 and @modelcontextprotocol/sdk v1.25.0 as transitive dependencies
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Adds three ccusage packages (@ccusage/codex, @ccusage/mcp, ccusage) at version ^17.2.0 to dependencies |
| bun.lock | Updates lock file with ccusage packages, their transitive dependencies (including @hono/mcp, gunshi, nano-spawn, args-tokens), and upgrades mime-types/mime-db versions |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
Summary
Changes
This PR adds the ccusage tool suite for code coverage analysis and MCP (Model Context Protocol) integration. The new dependencies include:
The bun.lock file has been updated to include all new transitive dependencies and pinned versions.
Summary by cubic
Add the ccusage tool suite for code coverage and MCP integration. Adds ccusage, @ccusage/codex, and @ccusage/mcp at v17.2.0, and updates bun.lock with new transitive dependencies.
Written for commit 7322a5e. Summary will update automatically on new commits.