Repository navigation
Bump the security group across 1 directory with 5 updates - #136
Merged
mellowagain merged 2 commits intoOct 25, 2026
Merged
mellowagain merged 2 commits into
mellowagain merged 2 commits into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
dependabot
Bot
added
automation::dependabot
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
| Layer / File(s) | Summary |
|---|---|
Update Next.js dependency gitarena-frontend/package.json |
The manifest changes the declared next version from 16.3.6 to 16.3.8. |
Priority:
Estimated code review effort: 1 (Trivial) | ~3 minutes
Change: Other
Suggested reviewers: mellowagain
Merge Risk: 
0d457
-
The dependency declarations and lockfile are synchronized, with no new runtime requirement or material regression established. The refresh is ready for normal merge checks.
Architecture risk: 
0d457
-
The change affects 1 system.
Changed systems:
gitarena-frontendArchitecture concerns
No architecture-level concerns identified.Review details
-
Systems and components
- observed — gitarena-frontend (service) was modified; 1 changed file maps to changed impact.
Before / after behavior
- observed — Modified behavior in gitarena-frontend/package.json: The
nextdependency version changed from16.3.6to16.3.8.
-
Pre-merge checks | 
-
✅ Passed checks (5 passed)
-
Check name Status Explanation Title check The title identifies a grouped security dependency update in one directory and states that five updates are included. It matches the pull request changes. Description check The description lists the five dependency updates, version changes, and relevant security fixes. It is directly related to the changeset. Docstring Coverage No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0… Linked Issues check Check skipped because no linked issues were found for this pull request. Out of Scope Changes check Check skipped because no linked issues were found for this pull request.
-
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
Owner
|
@dependabot rebase |
Bumps the security group with 5 updates in the /gitarena-frontend directory: | Package | From | To | | --- | --- | --- | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.4.1` | | [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.14` | `1.1.21` | | [sharp](https://github.com/lovell/sharp) | `0.35.4` | `0.35.5` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | Updates `next` from 16.3.6 to 16.4.1 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.4.1) Updates `@babel/core` from 7.29.0 to 7.29.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core) Updates `brace-expansion` from 1.1.14 to 1.1.21 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.14...v1.1.21) Updates `sharp` from 0.35.4 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.4...v0.35.5) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 7.29.7 dependency-type: indirect dependency-group: security - dependency-name: brace-expansion dependency-version: 1.1.21 dependency-type: indirect dependency-group: security - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production dependency-group: security - dependency-name: sharp dependency-version: 0.35.5 dependency-type: indirect dependency-group: security - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect dependency-group: security ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/gitarena-frontend/security-31b48bd1a5
branch
from
October 25, 2026 01:59
0d45747 to
8d9d6dd
Compare
Owner
|
@dependabot rebase |
…curity-31b48bd1a5
mellowagain
enabled auto-merge (squash)
October 25, 2026 03:05
mellowagain
deleted the
dependabot/npm_and_yarn/gitarena-frontend/security-31b48bd1a5
branch
October 25, 2026 03:10
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 5 updates in the /gitarena-frontend directory:
16.3.616.4.17.29.07.29.71.1.141.1.210.35.40.35.51.2.11.2.2Updates
nextfrom 16.3.6 to 16.4.1Release notes
Sourced from next's releases.
... (truncated)
Commits
7217011v16.4.11798e42[cd] Allow branch to get published9571ec8[lts-active][next/image] Bumpsharp(#234)a4cea6a[lts-active][react] Improve Server Component transport protocol (#193)8df0d97[lts-active][test] Backport various deploy test fixes (#100114)ac9afcc[lts-active] Fix google tag manager e2e test, assume GTM 200s instead of 404i...e273d5bv16.4.0fdf41d6[ai-upgrade] discover upgrade models and reasoning efforts from agent CLIs (#...c3e76adv16.4.0-canary.6347c6cc8Document next analyze export in the package bundling guide (#99735)Updates
@babel/corefrom 7.29.0 to 7.29.7Release notes
Sourced from @babel/core's releases.
... (truncated)
Commits
4fba754v7.29.704ea6b2v7.29.699f498a[7.x packport]Improve input source map handling (#18001)feba0a3Preserve original identifier names from input sourcemaps (#17992) (#17998)Updates
brace-expansionfrom 1.1.14 to 1.1.21Release notes
Sourced from brace-expansion's releases.
Commits
8e81e181.1.21ffdfa3eMerge commit from forkc6513ad1.1.201efee7cMerge commit from forka34340a1.1.190bcbfc0Merge commit from fork758fcd61.1.1827fbeedMerge commit from fork5c57cc21.1.17d757f1dnpm ignore.claudeUpdates
sharpfrom 0.35.4 to 0.35.5Release notes
Sourced from sharp's releases.
... (truncated)
Commits
51a990fRelease v0.35.596de105Upgrade to sharp-libvips v1.3.43a61390CI: Configure Dependabot with all package.json locations4940c50Improve gain map support for rotate/flip/flop ops20654aaPrerelease v0.35.5-rc.1ef4f934CI: Upgrade to Ubuntu 26.04358df95Upgrade to libvips v8.18.749f4903Improve gain map support for rotate-then-extract #46060e2e55eSilence a couple of compiler/static analysis warningscef3b8cImprove gain map support for extract operation #4606Updates
source-map-jsfrom 1.2.1 to 1.2.2Release notes
Sourced from source-map-js's releases.
Changelog
Sourced from source-map-js's changelog.
Commits
0a1d3341.2.24c6fa26Update changelogcf76580Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)7899a86Fix crash when executing browser with CSP script-src that don't permit unsafe...