Conversation
WalkthroughUpdated dependency version in package.json: @trustvc/w3c-vc from ^1.2.17 to ^1.3.0-alpha.5. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
Tip 🔌 Remote MCP (Model Context Protocol) integration is now available!Pro plan users can now connect to remote MCP servers from the Integrations page. Connect with popular remote MCPs such as Notion and Linear to add more context to your reviews and chats. ✨ Finishing Touches🧪 Generate unit tests
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR/Issue comments)Type Other keywords and placeholders
CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (1)
package.json (1)
72-72: Avoid floating pre-release range; pin exact alpha to reduce CI/install driftUsing a caret with a pre-release (
^1.3.0-alpha.5) can float to other alphas and eventually the stable 1.3.x, which may introduce untested changes over time. Prefer an exact pin for alphas to keep installs reproducible.Apply this diff:
- "@trustvc/w3c-vc": "^1.3.0-alpha.5", + "@trustvc/w3c-vc": "1.3.0-alpha.5",If a stable 1.3.x is available and acceptable, consider bumping to that instead of an alpha.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
💡 Knowledge Base configuration:
- MCP integration is disabled by default for public repositories
- Jira integration is disabled by default for public repositories
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json
📒 Files selected for processing (1)
package.json(1 hunks)
| "dependencies": { | ||
| "@govtechsg/jsonld": "^0.1.1", | ||
| "@trustvc/w3c-vc": "^1.2.17", | ||
| "@trustvc/w3c-vc": "^1.3.0-alpha.5", |
There was a problem hiding this comment.
💡 Verification agent
🧩 Analysis chain
Verify API/peer-deps compatibility and lockfile resolution after the bump
Sanity-check that our imports and any subpath imports still resolve, and inspect peerDependencies for 1.3.0-alpha.5 to avoid runtime surprises.
Run this script from the repo root:
If you want, I can help scan our code for specific API changes (constructors/functions/types) once you share release notes or breaking-change summaries for 1.3.x.
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== Scan direct imports of @trustvc/w3c-vc =="
rg -nP -C2 --type=ts --type=tsx --type=js --type=jsx \
'(from\s+["'\'']@trustvc/w3c-vc["'\'']|require\(\s*["'\'']@trustvc/w3c-vc["'\'']\s*\))' || true
echo "== Scan subpath imports of @trustvc/w3c-vc/* (may break across versions) =="
rg -nP -C2 --type=ts --type=tsx --type=js --type=jsx '@trustvc/w3c-vc\/[A-Za-z0-9_\-\/]+' || true
echo "== Detect lockfiles present =="
fd -H -t f --exact-depth 1 'package-lock.json' 'pnpm-lock.yaml' 'yarn.lock' 2>/dev/null || true
if [ -f package-lock.json ]; then
echo "== package-lock.json entries for @trustvc/w3c-vc =="
rg -nP -C1 '"@trustvc/w3c-vc"|^\s*"version":\s*"' package-lock.json | sed -n '1,200p' || true
fi
if [ -f pnpm-lock.yaml ]; then
echo "== pnpm-lock.yaml entries for @trustvc/w3c-vc =="
rg -nP -C2 '@trustvc/w3c-vc' pnpm-lock.yaml || true
fi
if [ -f yarn.lock ]; then
echo "== yarn.lock entries for @trustvc/w3c-vc =="
rg -nP -C2 '@trustvc/w3c-vc' yarn.lock || true
fi
echo "== Peer deps for 1.3.0-alpha.5 from npm registry =="
curl -s https://registry.npmjs.org/%40trustvc%2Fw3c-vc | jq '.versions["1.3.0-alpha.5"].peerDependencies // {}'
echo "== Runtime deps for 1.3.0-alpha.5 from npm registry =="
curl -s https://registry.npmjs.org/%40trustvc%2Fw3c-vc | jq '.versions["1.3.0-alpha.5"].dependencies // {}'
echo "Done. Review output for import breaks or new peer requirements."Length of output: 12002
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== package.json entries including jsonld =="
rg -nP '"jsonld"\s*:' package.json || true
echo "== Direct imports of jsonld package =="
rg -nP -C2 --type=ts --type=js "(from\s+['\"]jsonld['\"]|require\(\s*['\"]jsonld['\"]\))" || true
echo "== Direct imports of @govtechsg/jsonld wrapper =="
rg -nP -C2 --type=ts --type=js "(from\s+['\"]@govtechsg/jsonld['\"]|require\(\s*['\"]@govtechsg/jsonld['\"]\))" || trueLength of output: 1128
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== Locked @govtechsg/jsonld version =="
jq -r '.dependencies["@govtechsg/jsonld"].version' package-lock.json
echo "== @govtechsg/jsonld registry dependencies and peerDependencies =="
WRAPPER_VERSION=$(jq -r '.dependencies["@govtechsg/jsonld"].version' package-lock.json)
curl -s "https://registry.npmjs.org/%40govtechsg%2Fjsonld" \
| jq '.versions["'"$WRAPPER_VERSION"'"] | {dependencies, peerDependencies}'Length of output: 594
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== Wrapper version in lockfile (v3 packages) =="
jq -r '.packages["node_modules/@govtechsg/jsonld"].version // "not found"' package-lock.json
echo "== Wrapper registry peerDependencies and dependencies =="
WRAPPER_VERSION=$(jq -r '.packages["node_modules/@govtechsg/jsonld"].version' package-lock.json)
curl -s "https://registry.npmjs.org/%40govtechsg%2Fjsonld" \
| jq '.versions["'"$WRAPPER_VERSION"'"] | {dependencies, peerDependencies}'Length of output: 744
Add jsonld peer dependency for @trustvc/w3c-vc bump
Our bump to @trustvc/w3c-vc@^1.3.0-alpha.5 pulls in a new peer dependency on jsonld@^6.0.0, which isn’t declared in our package.json. To avoid install‐time warnings and runtime surprises, please:
• Add "jsonld": "^6.0.0" to your dependencies in package.json.
• Verify no direct or subpath imports of @trustvc/w3c-vc exist (scan passed with no matches).
• Confirm package-lock.json has been updated to @trustvc/w3c-vc@^1.3.0-alpha.5 (it has).
• Note that our @govtechsg/jsonld@0.1.1 wrapper remains unchanged and continues to work as before.
1 participant
Summary
bump w3c vc version
Summary by CodeRabbit