Repository navigation
chore(deps): major updates, part 1: the bumps that need no code change - #268
Merged
Merged
Conversation
First half of #260. Twelve of its bumps pass lint, typecheck, the unit suite with its coverage thresholds and `next build` without touching a source file: @google-analytics/data 7, @mdx-js/loader and @mdx-js/react 3, @babel/core and @babel/preset-typescript 8, @testing-library/jest-dom 7, @types/node 26 (package and overrides), cross-env 10, dotenv 18, glob 13, globals 17 and jest-fetch-mock 4. Left for the second half, each for a reason measured here: - googleapis 183 and octokit 5 each add enough declaration types that the type check inside `next build` runs out of the default 2 GB heap when both land; the tree is already close to the line. They move together with the switch from the all-APIs `googleapis` entry point to the Search Console package. - eslint 10, eslint-plugin-sonarjs 4, react-icons 5, jest 30 and react-intl 12 need config or code changes. - jsdom 30 cannot load under Jest on Node 22 (ESM-only chain). Dependabot now ignores its majors; the reason is in dependabot.yml.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
 |
|
Overall Grade |
Security Reliability Complexity Hygiene |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| JavaScript |  |
Oct 25, 2026 12:37p.m. | Review ↗ |
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
xabierlameiro
changed the base branch from
xlameiro/compassionate-shannon-1cbyhz
to
master
October 25, 2026 12:03
xabierlameiro
marked this pull request as ready for review
October 25, 2026 12:45
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
First half of #260. Branched from #267 so the audit gate is green underneath; until #267 merges the diff here shows its commits too, and shrinks to this PR's own commit afterwards. Based on
masterdirectly because the Quality Gate only runs for pull requests againstmaster. Twelve bumps, no source change:Left out, on purpose
googleapis183 andoctokit5. Each one alone passes; together the type check insidenext buildruns out of the default 2 GB heap (measured here by reverting one at a time: with either on its old major the build passes, with both bumped it dies withFailed to type check/ OOM). The tree is already near that line becausesrc/helpers/searchConsole.tsimports the all-APIsgoogleapisentry point, 339 APIs of declarations for one client. chore(deps): major updates, part 2: the bumps that needed code #269 switches that import to the Search Console package and takes both bumps.eslint10,eslint-plugin-sonarjs4,react-icons5,jest30 andreact-intl12: config or code changes, in chore(deps): major updates, part 2: the bumps that needed code #269.jsdom30: ESM-only chain that Jest cannotrequireon Node 22, so every suite importingsrc/pages/api/news.tsfails to load. Stays on 26; Dependabot now ignores its majors, with the reason independabot.yml.Checked locally: lint (0 errors),
tscfor both tsconfigs with the default heap, jest with coverage thresholds (90 suites),npm run audit:prod,next build.