Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 17, 2025

Bumps koa to 3.0.3 and updates ancestor dependency @nx/react. These dependencies need to be updated together.

Updates koa from 3.0.1 to 3.0.3

Release notes

Sourced from koa's releases.

v3.0.3

What's Changed

Full Changelog: koajs/koa@v3.0.2...v3.0.3

v3.0.2

What's Changed

New Contributors

Full Changelog: koajs/koa@v3.0.1...v3.0.2

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for koa since your current version.


Updates @nx/react from 21.6.4 to 22.0.3

Release notes

Sourced from @​nx/react's releases.

22.0.3 (2025-11-10)

🚀 Features

  • core: batch hash tasks without custom hashers (#33327)
  • core: add OSC 9;4 progress indicator support to TUI (#33325)
  • core: disable interactivity by default for run-one task outputs in tui (#33358)
  • gradle: use gitignore to determine dependant task output files (#33402)
  • maven: upgrade to version 0.0.8 with automated migration (#33315)
  • maven: add ci-workflow generator (#33346)
  • maven: bump version from 0.0.8 to 0.0.9 (#33405)
  • misc: remove CI investigation recommendations from agent rules (#33309)
  • vite: add vitest 4 to peerDep range to prevent conflicts (#33394)

🩹 Fixes

  • core: also look in .nx installation when reading nx.json extends (#33306)
  • core: handle various directories when importing prettier (#33383)
  • core: prevent args from being split by spaces when executing through nx wrapper (#33362)
  • core: correctly identify local workspace dependencies on windows (#33408)
  • maven: resolve maven dependencies from project roots (#33313)
  • maven: set migration version to 22.1.0-beta.4 (#33345)
  • maven: forward parameters through target dependencies (#33365)
  • module-federation: update @​module-federation packages to fix Koa vulnerability (#33285, #33380)
  • nextjs: ensure eslint-config-next matches Next.js 14 and 15 versions (#30259, #30258, #30257)
  • nx-dev: fix GitHub star button styling in mobile view (#33385)
  • testing: use .cts config files for Jest 30+ to fix __dirname issues (#33349, #32236)
  • vite: prevent race-condition when importing @​vitejs/plugin-vue (#33307)

❤️ Thank You

22.0.2 (2025-10-28)

🚀 Features

  • docker: support inferring additional args for targets with interpolation support (#32892)
  • gradle: add custom installation path to options (#33187)
  • nx-dev: add downloadable resources page and React book blog post (4b6009764a)
  • release: support {versionActionsVersion} in docker version scheme (#33178)

... (truncated)

Commits
  • 8801be3 chore(repo): rename jest.config.ts to jest.config.cts to be compat with Node ...
  • f958ebc fix(testing): use .cts config files for Jest 30+ to fix __dirname issues (#33...
  • 7c4a69d fix(module-federation): update @​module-federation packages to fix Koa vulnera...
  • 6e98692 chore(repo): dogfood pnpm catalogs (#33232)
  • 4f3b544 fix(vite): nxViteTsPaths supports local path aliases (#33241)
  • 6d86945 chore(repo): update nx to 22.0.0-beta.7 (#33118)
  • fd3c087 feat(release): allow changelog.renderer to be set to an implementation direct...
  • 45e420c fix(remix): ensure supported version of vite is used (#33089)
  • e8bd83e feat(core): add support for pnpm catalogs (#32978)
  • fde5908 feat(module-federation): support TS Soln and Package Manager workspaces parad...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [koa](https://github.com/koajs/koa) to 3.0.3 and updates ancestor dependency [@nx/react](https://github.com/nrwl/nx/tree/HEAD/packages/react). These dependencies need to be updated together.


Updates `koa` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](koajs/koa@v3.0.1...v3.0.3)

Updates `@nx/react` from 21.6.4 to 22.0.3
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.0.3/packages/react)

---
updated-dependencies:
- dependency-name: koa
  dependency-version: 3.0.3
  dependency-type: indirect
- dependency-name: "@nx/react"
  dependency-version: 22.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 17, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant