Skip to content

[Repo] Update build dependencies - #8957

Merged
0xFirekeeper merged 1 commit into
mainfrom
firekeeper/w2-build
Sep 11, 2026
Merged

0xFirekeeper merged 1 commit into
mainfrom
firekeeper/w2-build

Conversation

@0xFirekeeper

@0xFirekeeper 0xFirekeeper commented Sep 11, 2026 •

Copy link
Copy Markdown
Member

Summary by CodeRabbit

  • Chores
    • Updated the dashboard’s XML parsing dependency.
    • Added dependency version constraints to address known vulnerabilities and compatibility requirements across build and development tooling.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@0xFirekeeper
0xFirekeeper requested review from a team as code owners September 11, 2026 15:44
@vercel

vercel Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs-v2 Ready Ready Preview Sep 11, 2026 4:00pm UTC
nebula Ready Ready Preview Sep 11, 2026 4:00pm UTC
thirdweb_playground Ready Ready Preview Sep 11, 2026 4:00pm UTC
thirdweb-www Ready Ready Preview Sep 11, 2026 4:00pm UTC
wallet-ui Ready Ready Preview Sep 11, 2026 4:00pm UTC

@changeset-bot

changeset-bot Bot commented Sep 11, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: dcec73c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot added the Dashboard Involves changes to the Dashboard. label Sep 11, 2026
@coderabbitai

coderabbitai Bot commented Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: 137187e5-0a9e-43ec-b9bc-4eac617d6ec6

📥 Commits

Reviewing files that changed from the base of the PR and between 8fc2081 and dcec73c.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (2)
  • apps/dashboard/package.json
  • package.json

Included review availability: Your plan provides up to 5 included reviews per hour; 1 remains after this review.


Walkthrough

The pull request updates the dashboard’s fast-xml-parser version and adds root-level pnpm overrides for selected transitive dependencies.

Changes

Dependency updates

Layer / File(s) Summary
Dependency version constraints
apps/dashboard/package.json, package.json
The dashboard updates fast-xml-parser from ^5.2.5 to ^5.11.1. The root package adds pnpm overrides for selected minimatch, postcss, rollup, Babel, webpack, browserslist, tar, and picomatch versions.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to dcec7

The dependency updates have no confirmed current-head issue requiring changes before merge.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning No pull request description was provided. The required reviewer notes and testing information are missing. Add a pull request description with the issue tag if applicable, reviewer notes, and clear instructions for how to test the dependency updates.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly summarizes the main change: updating build dependencies. It is concise and related to the package dependency updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch firekeeper/w2-build

Comment @coderabbitai help to get the list of available commands.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedfast-xml-parser@​5.2.5 ⏵ 5.11.1100100 +75100 +194100

View full report

@codecov

codecov Bot commented Sep 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.67%. Comparing base (8fc2081) to head (dcec73c).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #8957   +/-   ##
=======================================
  Coverage   51.67%   51.67%           
=======================================
  Files         937      937           
  Lines       63783    63783           
  Branches     4198     4197    -1     
=======================================
  Hits        32962    32962           
+ Misses      30724    30723    -1     
- Partials       97       98    +1     
Flag Coverage Δ
packages 51.67% <ø> (ø)
see 1 file with indirect coverage changes
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

github-actions Bot commented Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
@thirdweb-dev/nexus (esm) 105.66 KB (0%)
@thirdweb-dev/nexus (cjs) 319.47 KB (0%)

This branch was successfully deployed

5 active deployments
Preview – docs-v2 — dcec73c2 Deployed Sep 11, 2026 by vercel[bot]
Preview – thirdweb-www — dcec73c2 Deployed Sep 11, 2026 by vercel[bot]
Preview – thirdweb_playground — dcec73c2 Deployed Sep 11, 2026 by vercel[bot]
Preview – nebula — dcec73c2 Deployed Sep 11, 2026 by vercel[bot]
Preview – wallet-ui — dcec73c2 Deployed Sep 11, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dashboard Involves changes to the Dashboard.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant