chore(deps): bump the minor-and-patch group across 1 directory with 6 updates - #1334
Conversation
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d85e082cb9
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@aws-sdk/credential-providers": "^3.982.0", | ||
| "@aws-sdk/lib-dynamodb": "~3.1076.0", | ||
| "@aws-sdk/lib-storage": "3.982.0", | ||
| "@aws-sdk/lib-storage": "3.1095.0", |
There was a problem hiding this comment.
The committed bun.lock still records all six previous dependency specifications and resolved versions, so it no longer matches this manifest. In the inspected .github/workflows/ci.yml install jobs and the root Dockerfile, dependencies are installed with bun install --frozen-lockfile; Bun's help defines that flag as “Disallow changes to lockfile,” so these CI and container builds cannot install the updated manifest. Commit the lockfile generated from these bumps.
Useful? React with 👍 / 👎.
|
🤖 pr-fix routine: blocked (no npm registry access), not by missing feedback All four failing checks — Root cause: the Dependabot commit (
CI installs with Why I can't fix it here: the fix requires Hand-editing To unblock, on a machine with registry access: git fetch origin dependabot/npm_and_yarn/dev/minor-and-patch-d4f3c32214
git checkout dependabot/npm_and_yarn/dev/minor-and-patch-d4f3c32214
bun install # regenerates bun.lock
git commit -am "chore(deps): update bun.lock for minor-and-patch group"
git pushOne thing to watch when you do: This is systemic, not specific to this PR. The same blocker was diagnosed on #1293 on 2026-07-23, and 13 other dependency PRs in this repo already carry
I've labelled this Generated by Claude Code |
krishagel
added
the
pr-fix-stuck
Claude
3ad7f9f to
3ee64cb
Compare
|
@dependabot rebase |
… updates Bumps the minor-and-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.982.0` | `3.1096.0` | | [argon2](https://github.com/ranisalt/node-argon2) | `0.44.0` | `0.45.1` | | [katex](https://github.com/KaTeX/KaTeX) | `0.17.0` | `0.18.1` | | [next](https://github.com/vercel/next.js) | `16.2.11` | `16.2.12` | | [react-shiki](https://github.com/AVGVSTVS96/react-shiki/tree/HEAD/package) | `0.10.1` | `0.11.0` | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` | Updates `@aws-sdk/lib-storage` from 3.982.0 to 3.1096.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1096.0/lib/lib-storage) Updates `argon2` from 0.44.0 to 0.45.1 - [Release notes](https://github.com/ranisalt/node-argon2/releases) - [Commits](ranisalt/node-argon2@v0.44.0...v0.45.1) Updates `katex` from 0.17.0 to 0.18.1 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.17.0...v0.18.1) Updates `next` from 16.2.11 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.11...v16.2.12) Updates `react-shiki` from 0.10.1 to 0.11.0 - [Release notes](https://github.com/AVGVSTVS96/react-shiki/releases) - [Changelog](https://github.com/AVGVSTVS96/react-shiki/blob/main/package/CHANGELOG.md) - [Commits](https://github.com/AVGVSTVS96/react-shiki/commits/react-shiki@0.11.0/package) Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) --- updated-dependencies: - dependency-name: "@aws-sdk/lib-storage" dependency-version: 3.1095.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: argon2 dependency-version: 0.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: katex dependency-version: 0.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.2.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-shiki dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
3ee64cb to
9105414
Compare
Dependabot bumped package.json without regenerating the bun lockfile (bun.lock is not natively supported by dependabot), so CI fails at bun install --frozen-lockfile. Regenerated with bun 1.2.23 to match the bun-version pinned in CI. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
argon2 >= 0.45's install script invokes 'bunx node-gyp@latest'; node-gyp 13's undici calls webidl.util.markAsUncloneable, which only exists on Node >= 22.9. The CDK job pinned Node 20.x, so 'bun install' died with 'markAsUncloneable is not a function' (the Test job passes because it uses the runner's system Node). The Lambda target stays node20 via the esbuild bundling config, which does not require the build host to run Node 20. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
krishagel
added
pr-fix-done
1 participant
Bumps the minor-and-patch group with 6 updates in the / directory:
3.982.03.1096.00.44.00.45.10.17.00.18.116.2.1116.2.120.10.10.11.00.34.50.35.3Updates
@aws-sdk/lib-storagefrom 3.982.0 to 3.1096.0Release notes
Sourced from @aws-sdk/lib-storage's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/lib-storage's changelog.
... (truncated)
Commits
1b94f0bPublish v3.1096.0753d651Publish v3.1095.0bb564e5chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...c379112Publish v3.1094.00f79b6aPublish v3.1093.080f0df5Publish v3.1092.0a1269f7Publish v3.1091.0eb268edPublish v3.1090.060e8b54Publish v3.1089.073de389Publish v3.1088.0Updates
argon2from 0.44.0 to 0.45.1Release notes
Sourced from argon2's releases.
Commits
786de71fix: hash function generated typese2fe33ffix: update Node.js version to latest in publish jobe27980ffix: revert sync to default in freebsd test3d0a0b4fix: change npm publish to npm stage publish in release workflowc61513fchore: update actions versions2bc0733fix: revert sync to default in freebsd buildb012379chore: update dependencies and devDependenciesd2edf4efix(tests): add unicode flag to regex assertions in option tests0eb1db1Apply npm fixes to package.jsona09b94eFix compilation on solaris (#538)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for argon2 since your current version.
Updates
katexfrom 0.17.0 to 0.18.1Release notes
Sourced from katex's releases.
Changelog
Sourced from katex's changelog.
Commits
cdf479fchore(release): 0.18.1 [ci skip]87a2b30fix(htmlData): allow escaped commas in \htmlData (#4236)2318066chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)3b5b6a0chore(deps): bump actions/checkout from 6 to 7 (#4232)4e9d31achore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)b7ca8f0chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)bf1a59fchore: use pixel diff as fallback for byte-to-byte (#4245)4d9d0aechore(release): 0.18.0 [ci skip]6f5c44ffeat: prefix css classes (#4229)2c6143arefactor: remove direct hasOwnProperty call (#4230)Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
nextfrom 16.2.11 to 16.2.12Release notes
Sourced from next's releases.
Commits
2234717v16.2.12957f5ed[Backport] Fixes to support TypeScript 7 (#95831)b56eb16Backport/docs fixes 16.2 - July round (#96031)Updates
react-shikifrom 0.10.1 to 0.11.0Release notes
Sourced from react-shiki's releases.
Changelog
Sourced from react-shiki's changelog.
Commits
fefb830chore: update versions (#170)7b22c1efix: trim language ids before resolving (#183)2759296fix: extend highlighted-line backgrounds into pre padding (#182)4937a4cfeat: add experimentaloutputFormat: 'tokens'support (#146)cdf859afeat: add highlighted line support (#172)3907885fix: replace CSS cascade layer with unlayered :where() default styles (#174)a8c491fchore(deps): update all non-major dependencies (#166)1eaf27cfix: rename css layer from base to react-shiki (#169)Updates
sharpfrom 0.34.5 to 0.35.3Release notes
Sourced from sharp's releases.
... (truncated)
Commits
1018449Release v0.35.3ba303a7Prerelease v0.35.3-rc.24f94fc5Upgrade to sharp-libvips v1.3.2c5e7a3fBump devDeps, fix Deno/Windows smoke tests9a8d002Docs: Add changelog entry and note about transferable #45208694db0TypeScript: Return more preciseBuffer\<ArrayBuffer>fromtoBuffer(#4520)e000d0bPrerelease v0.35.3-rc.19554ca9Prerelease v0.35.3-rc.06a29fd5Emit warning about native binaries on Linux Electron540d2eaIncrease default concurrency when use of MALLOC_ARENA_MAX detected