Skip to content

Chore/relock #7606

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
laurac8r wants to merge 17 commits into from
+519 −4
Closed

Chore/relock #7606

Show file tree
Hide file tree
Changes from 7 commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
42e7d3f
chore: relock
laurac8r Mar 26, 2026
7450f52
chore: relock
laurac8r Mar 26, 2026
41156e6
chore: update faker-js to version 10.4.0 and switch image URL generat…
laurac8r Mar 26, 2026
9113e69
chore: update package-lock.json to mark dependencies as devOptional
laurac8r Mar 27, 2026
ada9803
chore: relock
laurac8r Mar 29, 2026
92c0c21
chore: patch known security vulnerabilities in package.json before in…
laurac8r Mar 29, 2026
4e143ac
chore: add security patching script for package dependencies
laurac8r Mar 29, 2026
c9945ed
chore: relock
laurac8r Mar 29, 2026
2f46706
chore: update security patching script to use force-install versions …
laurac8r Mar 29, 2026
0993fb1
chore: enhance security patching tests and add buildForceInstallArgs …
laurac8r Mar 29, 2026
e57b8ac
chore: update npm install commands for consistency and clarity
laurac8r Mar 29, 2026
7ed4826
chore: revert
laurac8r Mar 29, 2026
be9f348
Merge remote-tracking branch 'refs/remotes/upstream/main' into chore/…
laurac8r Mar 29, 2026
4c5c039
chore: adjust shell option for cross-platform compatibility in dev sc…
laurac8r Mar 29, 2026
1cfe0dd
chore: add root-level npm override patches and update dependency hand…
laurac8r Mar 29, 2026
37aca38
Merge remote-tracking branch 'origin/main'
laurac8r Mar 29, 2026
d6d9652
Merge branch 'refs/heads/main' into chore/relock
laurac8r Mar 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50,183 changes: 25,053 additions & 25,130 deletions package-lock.json
View file
Open in desktop

Large diffs are not rendered by default.

27 changes: 21 additions & 6 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,10 +21,10 @@
"homepage": "https://usebruno.com",
"devDependencies": {
"@eslint/compat": "^1.3.2",
"@faker-js/faker": "^7.6.0",
"@faker-js/faker": "^10.4.0",
"@jest/globals": "^29.2.0",
"@opencollection/types": "~0.8.0",
"@playwright/test": "^1.51.1",
"@playwright/test": "^1.55.1",
"@rollup/plugin-json": "^6.1.0",
"@storybook/addon-webpack5-compiler-babel": "^4.0.0",
"@storybook/builder-webpack5": "^10.1.10",
Expand All @@ -45,7 +45,7 @@
"jest": "^29.2.0",
"lodash-es": "^4.17.21",
"nano-staged": "^0.8.0",
"playwright": "^1.51.1",
"playwright": "^1.55.1",
"pretty-quick": "^3.1.3",
"randomstring": "^1.2.2",
"rimraf": "^6.0.1",
Expand Down Expand Up @@ -92,15 +92,30 @@
]
},
"overrides": {
"rollup": "3.29.5",
"rollup": "3.30.0",
"ajv": "^8.18.0",
"qs": "^6.15.0",

Copilot AI Mar 29, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new overrides entries for ajv and qs are ranges (^...). Overrides are typically used to force a specific version for reproducibility/security; using a range can allow unexpected future upgrades. Consider pinning exact versions here (consistent with the rollup override).

Suggested change
"ajv": "^8.18.0",
"qs": "^6.15.0",
"ajv": "8.18.0",
"qs": "6.15.0",

Copilot uses AI. Check for mistakes.
"tar": ">=7.5.11",
"undici": ">=6.24.0",
"serialize-javascript": ">=7.0.5",
"svgo": ">=2.8.1",
"fast-xml-parser": ">=5.5.7",
"flatted": ">=3.4.2",
"form-data": ">=4.0.5",
"immutable": ">=5.1.5",
"minimatch": ">=3.1.4",
"path-to-regexp": ">=0.1.13",
"pbkdf2": ">=3.1.3",
"picomatch": ">=2.3.2",
"glob": ">=10.4.6",
"electron-store": {
"conf": {
"json-schema-typed": "8.0.1"
}
}
},
"dependencies": {
"ajv": "^8.17.1",
"ajv": "^8.18.0",
"git-url-parse": "^14.1.0"
}
}
}
8 changes: 4 additions & 4 deletions packages/bruno-app/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
},
"dependencies": {
"@fontsource/inter": "^5.0.15",
"@prantlf/jsonlint": "^16.0.0",
"@prantlf/jsonlint": "^17.0.1",
"@reduxjs/toolkit": "^1.8.0",
"@tabler/icons": "^1.46.0",
"@testing-library/user-event": "^14.6.1",
Expand Down Expand Up @@ -55,7 +55,7 @@
"know-your-http-well": "^0.5.0",
"linkify-it": "^5.0.0",
"lodash": "^4.17.21",
"markdown-it": "^13.0.2",
"markdown-it": "^14.1.1",
"markdown-it-replace-link": "^1.2.0",
"mime-types": "^3.0.2",
"moment": "^2.30.1",
Expand Down Expand Up @@ -102,10 +102,10 @@
"@babel/preset-react": "^7.27.1",
"@rsbuild/core": "^1.1.2",
"@rsbuild/plugin-babel": "^1.0.3",
"@rsbuild/plugin-node-polyfill": "^1.2.0",
"@rsbuild/plugin-node-polyfill": "^1.4.4",
"@rsbuild/plugin-react": "^1.0.7",
"@rsbuild/plugin-sass": "^1.1.0",
"@rsbuild/plugin-styled-components": "1.1.0",
"@rsbuild/plugin-styled-components": "^1.6.1",
"@testing-library/dom": "^10.4.1",
"@testing-library/jest-dom": "^6.6.3",
"@testing-library/react": "^16.3.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-cli/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@
"package.json"
],
"dependencies": {
"@aws-sdk/credential-providers": "3.750.0",
"@aws-sdk/credential-providers": "3.1019.0",
"@usebruno/common": "0.1.0",
"@usebruno/converters": "^0.1.0",
"@usebruno/filestore": "^0.1.0",
Expand Down
4 changes: 2 additions & 2 deletions packages/bruno-common/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"devDependencies": {
"@babel/preset-env": "^7.26.9",
"@babel/preset-typescript": "^7.27.0",
"@faker-js/faker": "^9.7.0",
"@faker-js/faker": "^10.4.0",
"@jest/globals": "^29.7.0",
"@rollup/plugin-commonjs": "^23.0.2",
"@rollup/plugin-node-resolve": "^15.0.1",
Expand All @@ -49,7 +49,7 @@
"form-data": "^4.0.0",
"is-ip": "^5.0.1",
"moment": "^2.29.4",
"rollup": "3.29.5",
"rollup": "3.30.0",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-terser": "^7.0.2",
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-common/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ const { nodeResolve } = require('@rollup/plugin-node-resolve');
const commonjs = require('@rollup/plugin-commonjs');
const typescript = require('@rollup/plugin-typescript');
const dts = require('rollup-plugin-dts');
const { terser } = require('rollup-plugin-terser');
const terser = require('@rollup/plugin-terser');
const peerDepsExternal = require('rollup-plugin-peer-deps-external');

const packageJson = require('./package.json');
Expand Down
24 changes: 12 additions & 12 deletions packages/bruno-common/src/utils/faker-functions.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,18 +43,18 @@ export const mockDataFunctions = {
randomLongitude: () => faker.location.longitude(),
randomAvatarImage: () => faker.image.avatar(),
randomImageUrl: () => faker.image.url(),
randomAbstractImage: () => faker.image.urlLoremFlickr({ category: 'abstract' }),
randomAnimalsImage: () => faker.image.urlLoremFlickr({ category: 'animals' }),
randomBusinessImage: () => faker.image.urlLoremFlickr({ category: 'business' }),
randomCatsImage: () => faker.image.urlLoremFlickr({ category: 'cats' }),
randomCityImage: () => faker.image.urlLoremFlickr({ category: 'city' }),
randomFoodImage: () => faker.image.urlLoremFlickr({ category: 'food' }),
randomNightlifeImage: () => faker.image.urlLoremFlickr({ category: 'nightlife' }),
randomFashionImage: () => faker.image.urlLoremFlickr({ category: 'fashion' }),
randomPeopleImage: () => faker.image.urlLoremFlickr({ category: 'people' }),
randomNatureImage: () => faker.image.urlLoremFlickr({ category: 'nature' }),
randomSportsImage: () => faker.image.urlLoremFlickr({ category: 'sports' }),
randomTransportImage: () => faker.image.urlLoremFlickr({ category: 'transport' }),
randomAbstractImage: () => faker.image.urlPicsumPhotos(),
randomAnimalsImage: () => faker.image.urlPicsumPhotos(),
randomBusinessImage: () => faker.image.urlPicsumPhotos(),
randomCatsImage: () => faker.image.urlPicsumPhotos(),
randomCityImage: () => faker.image.urlPicsumPhotos(),
randomFoodImage: () => faker.image.urlPicsumPhotos(),
randomNightlifeImage: () => faker.image.urlPicsumPhotos(),
randomFashionImage: () => faker.image.urlPicsumPhotos(),
randomPeopleImage: () => faker.image.urlPicsumPhotos(),
randomNatureImage: () => faker.image.urlPicsumPhotos(),
randomSportsImage: () => faker.image.urlPicsumPhotos(),
randomTransportImage: () => faker.image.urlPicsumPhotos(),

Copilot AI Mar 29, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These functions are still named as category-specific image generators (e.g., randomCatsImage, randomFoodImage), but they now all return the same generic urlPicsumPhotos() output. This makes the API misleading; either restore category-specific behavior (e.g., by constructing category URLs) or rename/adjust documentation so consumers don’t expect category-specific images.

Suggested change
randomAbstractImage: () => faker.image.urlPicsumPhotos(),
randomAnimalsImage: () => faker.image.urlPicsumPhotos(),
randomBusinessImage: () => faker.image.urlPicsumPhotos(),
randomCatsImage: () => faker.image.urlPicsumPhotos(),
randomCityImage: () => faker.image.urlPicsumPhotos(),
randomFoodImage: () => faker.image.urlPicsumPhotos(),
randomNightlifeImage: () => faker.image.urlPicsumPhotos(),
randomFashionImage: () => faker.image.urlPicsumPhotos(),
randomPeopleImage: () => faker.image.urlPicsumPhotos(),
randomNatureImage: () => faker.image.urlPicsumPhotos(),
randomSportsImage: () => faker.image.urlPicsumPhotos(),
randomTransportImage: () => faker.image.urlPicsumPhotos(),
randomAbstractImage: () => faker.image.urlLoremFlickr({ category: 'abstract' }),
randomAnimalsImage: () => faker.image.urlLoremFlickr({ category: 'animals' }),
randomBusinessImage: () => faker.image.urlLoremFlickr({ category: 'business' }),
randomCatsImage: () => faker.image.urlLoremFlickr({ category: 'cats' }),
randomCityImage: () => faker.image.urlLoremFlickr({ category: 'city' }),
randomFoodImage: () => faker.image.urlLoremFlickr({ category: 'food' }),
randomNightlifeImage: () => faker.image.urlLoremFlickr({ category: 'nightlife' }),
randomFashionImage: () => faker.image.urlLoremFlickr({ category: 'fashion' }),
randomPeopleImage: () => faker.image.urlLoremFlickr({ category: 'people' }),
randomNatureImage: () => faker.image.urlLoremFlickr({ category: 'nature' }),
randomSportsImage: () => faker.image.urlLoremFlickr({ category: 'sports' }),
randomTransportImage: () => faker.image.urlLoremFlickr({ category: 'transport' }),

Copilot uses AI. Check for mistakes.
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
randomImageDataUri: () => faker.image.dataUri(),
randomBankAccount: () => faker.finance.accountNumber(),
randomBankAccountName: () => faker.finance.accountName(),
Expand Down
4 changes: 2 additions & 2 deletions packages/bruno-converters/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,11 +37,11 @@
"@web/rollup-plugin-copy": "^0.5.1",
"babel-jest": "^29.7.0",
"rimraf": "^5.0.7",
"rollup": "3.29.5",
"rollup": "3.30.0",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-terser": "^7.0.2",
"typescript": "^4.8.4"
"typescript": "^5.8.3"
},
"overrides": {
"rollup": "3.29.5"
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-converters/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
const { nodeResolve } = require('@rollup/plugin-node-resolve');
const commonjs = require('@rollup/plugin-commonjs');
const typescript = require('@rollup/plugin-typescript');
const { terser } = require('rollup-plugin-terser');
const terser = require('@rollup/plugin-terser');
const peerDepsExternal = require('rollup-plugin-peer-deps-external');
const { copy } = require('@web/rollup-plugin-copy');
const path = require('path');
Expand Down
4 changes: 2 additions & 2 deletions packages/bruno-electron/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
]
},
"dependencies": {
"@aws-sdk/credential-providers": "3.750.0",
"@aws-sdk/credential-providers": "3.1019.0",
"@grpc/grpc-js": "^1.13.2",
"@grpc/proto-loader": "^0.7.13",
"@lydell/node-pty": "^1.1.0",
Expand Down Expand Up @@ -82,7 +82,7 @@
},
"devDependencies": {
"electron": "~37.6.1",
"electron-builder": "^24.13.3",
"electron-builder": "^26.8.1",

@coderabbitai coderabbitai Bot Mar 29, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

electron-builder v26 breaking changes migration

💡 Result:

electron-builder v26 (released January 2025 as the major version after v25) introduced several significant changes, primarily around dependency collection, packaging, and platform-specific improvements. While not explicitly labeled as "breaking changes" in the official changelog, early v26.x releases (starting ~v26.0.4) had regressions that broke builds for some users, particularly around native module handling and node_modules collection. These were fixed in subsequent patches. Key changes in v26.0.0 (from GitHub PR #8808): Major: - Removed HFS+ DMG support on non-arm64 macOS (macOS 15.2 sunset). - Removed deprecated fields from winOptions/macOptions. - Migrated to official electron/asar packaging. - Migrated electronDist to a build Hook. - Other feats: pacman autoupdates, S3 forcePathStyle, pwsh detection for Azure, etc. Notable regressions (fixed in later patches): - v26.0.4: Builds broken for projects with native deps (e.g., Rust/C); fixed in v26.0.5+ via PR #8845 (Issue #8842). - v26.0.12: node-module-collector issues on Windows (assumes .cmd extensions, shell execution problems, Yarn npm fallback); fixed in v26.0.13+ and v26.0.17 (PR #9026, Issue #9020). - v26.3.1-v26.4.0: Bloated app.asar/node_modules size (e.g., 35->294 folders, 36MB->348MB); fixed in later releases like v26.7.0 via duplicate dependency resolution (PR #9548, Issue #9532). - v26.0.0: TypeScript type errors for consumers (skipLibCheck=false); fixed in v26.0.1 (Issue #8812). Migration steps: 1. Update to latest v26.x (as of 2026-03-29: v26.8.2). Run npm install electron-builder@latest --save-dev or equivalent. 2. For Yarn 3+: Ensure .yarnrc.yml has nodeLinker: "node-modules" (required for native deps). 3. Run electron-builder install-app-deps before building to handle native modules correctly. 4. Check/update config for removed deprecated options (e.g., winOptions signing -> win.signtoolOptions). 5. Test builds on all targets; monitor app size and native module inclusion (e.g., sharp). 6. If using workspaces or monorepos, verify node_modules collection (improved in v26). 7. Official docs unchanged: https://www.electron.build/configuration.html. No dedicated migration guide, but review your package.json "build" section. Most issues were patched quickly; v26 is now stable with better Yarn/pnpm/corepack support, smaller bundles, and improved collectors.

Citations:

🏁 Script executed:

find . -name "*electron-builder*" -type f | grep -E "\.(js|json|config)" | head -20

Repository: usebruno/bruno

Length of output: 110

🏁 Script executed:

cat -n ./packages/bruno-electron/electron-builder-config.js

Repository: usebruno/bruno

Length of output: 3305

🌐 Web query:

electron-builder v26 removed winOptions sign deprecated

💡 Result:

In electron-builder v26.0.0 (released January 2025), deprecated signing configuration fields were removed from the top-level win options object as a breaking change. Previously available signing options like certificateFile, certificatePassword, certificateSubjectName, publisherName, signingHashAlgorithms, etc., which were directly under win (sometimes referred to as winOptions), have been removed. These options have been restructured: - Standard signtool.exe signing configuration is now nested under win.signtoolOptions. - Azure Trusted Signing configuration is under win.azureSignOptions. This cleanup was done to support separate Azure signing configuration without bloating the win object and to remove long-deprecated fields. The change was implemented in PR #8582 (merged Jan 13, 2025) and included in the v26.0.0 GA release (PR #8808). Migration example: "build": { "win": { "signtoolOptions": { "certificateSubjectName": "Your Subject Name", "publisherName": "Your Publisher Name", "signingHashAlgorithms": ["sha256"] // other signtool options } } } Official documentation confirms win.signtoolOptions as the current path for Windows signing configuration using signtool.exe. Configurations using the old direct win signing fields will fail in v26+ and must be updated to the new nested structure. Latest version as of 2026-03-29 is v26.8.2.

Citations:

Review electron-builder v26 Windows signing config structure.

electron-builder v26 removed deprecated signing fields (sign, publisherName, certificateFile, etc.) from the top-level win object as a breaking change. These must now be nested under win.signtoolOptions or win.azureSignOptions. The config currently has win.sign: null and win.publisherName: 'Bruno Software Inc' which will not parse in v26. Update the Windows section to use the new structure, or verify if signing is required and configure accordingly. Other properties (mac.hardenedRuntime, mac.entitlements, nsis options) remain compatible.

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@packages/bruno-electron/package.json` at line 85, The electron-builder
Windows signing config uses removed top-level fields (win.sign and
win.publisherName) which will break under v26; update the package.json
electron-builder config by moving any signing-related settings into either
win.signtoolOptions or win.azureSignOptions (or remove them if signing is not
required), e.g., replace win.sign and win.publisherName with the appropriate
nested structure under win.signtoolOptions or win.azureSignOptions and ensure
other Windows signing keys are renamed accordingly so the config parses under
electron-builder v26.

"electron-devtools-installer": "^4.0.0"
}
}
4 changes: 2 additions & 2 deletions packages/bruno-filestore/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,11 @@
"jest": "^29.2.0",
"nanoid": "3.3.8",
"rimraf": "^3.0.2",
"rollup": "3.29.5",
"rollup": "3.30.0",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-terser": "^7.0.2",
"typescript": "^4.8.4"
"typescript": "^5.8.3"
},
"overrides": {
"rollup": "3.29.5"
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-filestore/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ const { nodeResolve } = require('@rollup/plugin-node-resolve');
const commonjs = require('@rollup/plugin-commonjs');
const typescript = require('@rollup/plugin-typescript');
const json = require('@rollup/plugin-json');
const { terser } = require('rollup-plugin-terser');
const terser = require('@rollup/plugin-terser');
const peerDepsExternal = require('rollup-plugin-peer-deps-external');

const packageJson = require('./package.json');
Expand Down
8 changes: 4 additions & 4 deletions packages/bruno-graphql-docs/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,22 +19,22 @@
"@types/markdown-it": "^12.2.3",
"@types/react": "^18.0.25",
"graphql": "^16.6.0",
"markdown-it": "^13.0.1",
"markdown-it": "^14.1.1",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
"postcss": "8.4.47",
"react": "19.0.0",
"react-dom": "18.2.0",
"rollup":"3.29.5",
"rollup":"3.30.0",

Copilot AI Mar 29, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

markdown-it was upgraded to ^14.1.1, but peerDependencies.markdown-it still requires ^13.0.1. This creates an inconsistent contract for consumers and can lead to install warnings or incompatible runtime behavior; update the peer dependency range (or keep devDependency on v13) to reflect the supported major versions.

Copilot uses AI. Check for mistakes.
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-postcss": "^4.0.2",
"rollup-plugin-terser": "^7.0.2",
"typescript": "^4.8.4"
"typescript": "^5.8.3"
},
"peerDependencies": {
"graphql": "^16.6.0",
"markdown-it": "^13.0.1"
},
"overrides": {
"rollup":"3.29.5"
"rollup":"3.30.0"
}
}
2 changes: 1 addition & 1 deletion packages/bruno-graphql-docs/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ const commonjs = require('@rollup/plugin-commonjs');
const typescript = require('@rollup/plugin-typescript');
const dts = require('rollup-plugin-dts');
const postcss = require('rollup-plugin-postcss');
const { terser } = require('rollup-plugin-terser');
const terser = require('@rollup/plugin-terser');
const peerDepsExternal = require('rollup-plugin-peer-deps-external');

const packageJson = require('./package.json');
Expand Down
4 changes: 2 additions & 2 deletions packages/bruno-js/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"dependencies": {
"@usebruno/common": "0.1.0",
"@usebruno/query": "0.1.0",
"ajv": "^8.12.0",
"ajv": "^8.18.0",
"ajv-formats": "^2.1.1",
"atob": "^2.1.2",
"axios": "^1.8.3",
Expand All @@ -40,7 +40,7 @@
"devDependencies": {
"@rollup/plugin-commonjs": "^23.0.2",
"@rollup/plugin-node-resolve": "^15.0.1",
"rollup": "3.29.5",
"rollup": "3.30.0",
"rollup-plugin-terser": "^7.0.2"
}
}
6 changes: 3 additions & 3 deletions packages/bruno-query/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,13 +24,13 @@
"@rollup/plugin-commonjs": "^23.0.2",
"@rollup/plugin-node-resolve": "^15.0.1",
"@rollup/plugin-typescript": "^9.0.2",
"rollup":"3.29.5",
"rollup":"3.30.0",
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-terser": "^7.0.2",
"typescript": "^4.8.4"
"typescript": "^5.8.3"
},
"overrides": {
"rollup":"3.29.5"
"rollup":"3.30.0"
}
}
2 changes: 1 addition & 1 deletion packages/bruno-query/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ const { nodeResolve } = require("@rollup/plugin-node-resolve");
const commonjs = require("@rollup/plugin-commonjs");
const typescript = require("@rollup/plugin-typescript");
const dts = require("rollup-plugin-dts");
const { terser } = require("rollup-plugin-terser");
const terser = require("@rollup/plugin-terser");

@coderabbitai coderabbitai Bot Mar 29, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Use single quotes for the import string.

Line 5 uses double quotes; this should be single quotes to match repo conventions.

Suggested fix 
-const terser = require("@rollup/plugin-terser");
+const terser = require('@rollup/plugin-terser');

As per coding guidelines: “Stick to single quotes for strings.”

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@packages/bruno-query/rollup.config.js` at line 5, The import string for the
terser plugin uses double quotes; update the require call for terser (the const
terser = require("@rollup/plugin-terser"); statement) to use single quotes
instead to match repo string conventions (e.g.
require('@rollup/plugin-terser')). Ensure only the quotation marks change and no
other code is modified.

const peerDepsExternal = require('rollup-plugin-peer-deps-external');

const packageJson = require("./package.json");
Expand Down
6 changes: 3 additions & 3 deletions packages/bruno-requests/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
"prepack": "npm run test && npm run build"
},
"dependencies": {
"@faker-js/faker": "^9.7.0",
"@faker-js/faker": "^10.4.0",
"@grpc/grpc-js": "^1.13.3",
"@grpc/proto-loader": "^0.7.15",
"@types/qs": "^6.9.18",
Expand Down Expand Up @@ -49,11 +49,11 @@
"babel-jest": "^29.7.0",
"builtin-modules": "^5.0.0",
"jest": "^29.2.0",
"rollup": "3.29.5",
"rollup": "3.30.0",
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
"rollup-plugin-dts": "^5.0.0",
"rollup-plugin-peer-deps-external": "^2.2.4",
"rollup-plugin-terser": "^7.0.2",
"typescript": "^4.8.4"
"typescript": "^5.8.3"
},
"overrides": {
"rollup": "3.29.5"
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-requests/rollup.config.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ const { nodeResolve } = require('@rollup/plugin-node-resolve');
const commonjs = require('@rollup/plugin-commonjs');
const typescript = require('@rollup/plugin-typescript');
const dts = require('rollup-plugin-dts');
const { terser } = require('rollup-plugin-terser');
const terser = require('@rollup/plugin-terser');
const peerDepsExternal = require('rollup-plugin-peer-deps-external');
const json = require('@rollup/plugin-json');
const { isBuiltin } = require('module');
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-requests/src/grpc/grpcMessageGenerator.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ const generateSampleMessageFromFields = (fields, options = {}) => {
switch (field.type) {
case 'TYPE_DOUBLE':
case 'TYPE_FLOAT':
value = faker.number.float({ min: 0, max: 1000, precision: 0.01 });
value = faker.number.float({ min: 0, max: 1000, multipleOf: 0.01 });
break;
case 'TYPE_INT32':
case 'TYPE_INT64':
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-tests/collection/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "@usebruno/test-collection",
"version": "0.0.1",
"dependencies": {
"@faker-js/faker": "^8.4.0",
"@faker-js/faker": "^10.4.0",
"ajv": "~8.17.1",
"external-lib-with-bru-req-res-objects": "file:../external-lib-with-bru-req-res-objects",
"jose": "^5.2.0",
Expand Down
2 changes: 1 addition & 1 deletion packages/bruno-tests/collection_level_oauth2/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@
"name": "@usebruno/test-collection",
"version": "0.0.1",
"dependencies": {
"@faker-js/faker": "^8.4.1"
"@faker-js/faker": "^10.4.0"
}
}
2 changes: 1 addition & 1 deletion packages/bruno-tests/collection_oauth2/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@
"name": "@usebruno/test-collection",
"version": "0.0.1",
"dependencies": {
"@faker-js/faker": "^8.4.0"
"@faker-js/faker": "^10.4.0"
}
}
4 changes: 2 additions & 2 deletions packages/bruno-tests/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,14 +19,14 @@
"homepage": "https://github.com/usebruno/bruno-testbench#readme",
"dependencies": {
"axios": "^1.8.3",
"body-parser": "2.2.0",
"body-parser": "2.2.2",
"cookie-parser": "^1.4.6",
"cors": "^2.8.5",
"express": "^4.21.2",
"graphql": "^16.10.0",
"graphql-yoga": "^5.10.6",
"express-basic-auth": "^1.2.1",
"fast-xml-parser": "^5.0.8",
"fast-xml-parser": "^5.5.9",
"http-proxy": "^1.18.1",
"js-yaml": "^4.1.1",
"jsonwebtoken": "^9.0.3",
Expand Down
Loading