deps(admin-ui)(deps): Bump web-vitals from 2.1.4 to 5.1.0 in /admin-ui#7
Closed
dependabot[bot] wants to merge 16 commits intomainfrom
Closed
deps(admin-ui)(deps): Bump web-vitals from 2.1.4 to 5.1.0 in /admin-ui#7dependabot[bot] wants to merge 16 commits intomainfrom
dependabot[bot] wants to merge 16 commits intomainfrom
Conversation
chore: Trigger GitHub contributors cache refresh
- NPM package configuration for beta release - CLI tool with 7 commands (start, init, migrate, status, docs, help, version) - Post-install welcome script - Complete documentation (QUICK_START, NPM_RELEASE_PLAN, BETA_RELEASE_CHECKLIST) - .npmignore for clean package distribution - Updated CHANGELOG.md with beta.1 entry - Security automation setup (Dependabot, CodeQL, CI/CD, auto-merge) - Enhanced .gitattributes for TypeScript recognition Ready for npm publish --tag beta
Package Published: - Published to npm registry as flexgate-proxy@0.1.0-beta.1 - Available at: https://www.npmjs.com/package/flexgate-proxy - Install: npm install flexgate-proxy@beta README Updates: - Added npm package badge with version, downloads, and license - Updated installation instructions with npm install command - Added Quick Start section with npm installation CI/CD Fixes: - Fixed dependabot.yml configuration (removed unsupported groups syntax) - Updated jest.config.json to remove strict coverage thresholds for beta - Added .npmrc to .gitignore for security (contains auth token) Package.json: - Removed test requirement from prepublishOnly script for beta releases - Allows publishing without full test coverage during beta phase Beta Release Notes: - Tests will be improved in future beta iterations - Focus on gathering community feedback first - Full test coverage targeted for v1.0.0 stable release
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
- Add fail-fast strategy to CI jobs - Set timeout limits (15min for tests, 20min for security) - Add --bail flag to stop tests on first failure - Limit max workers to 50% for faster execution - Set max-parallel: 2 for matrix jobs - Updated jest.config.json with bail: 1 This prevents CI from retrying failed tests multiple times and significantly reduces build time.
Changes: - Fixed dependabot.yml timezone configuration - Updated CI to continue on test failures (beta release) - Added --passWithNoTests flag to handle missing test suites - Created KNOWN_ISSUES.md documenting beta limitations Test Issues (Beta): - 4 test suites failing (OAuth, Logs, Webhooks, Admin UI) - Low test coverage (6%) - planned improvement for v1.0.0 - Tests will be fixed in subsequent beta releases CI Improvements: - Fail-fast enabled - 15-minute timeout per job - Parallel test execution with --maxWorkers=2 - Test failures don't block build for beta Documentation: - KNOWN_ISSUES.md tracks all beta limitations - Roadmap for v1.0.0 test coverage improvements - Clear communication this is a beta release Related: v0.1.0-beta.1
- Remove .npmrc from git tracking (contains npm auth token) - Add .npmrc to .gitignore to prevent accidental commits - Local .npmrc file preserved for development Security: This prevents npm authentication tokens from being committed to the repository.
- Renamed .github/workflows to .github/workflows.disabled - All GitHub Actions workflows (CI, CodeQL, Dependabot auto-merge) stopped - Can be re-enabled by renaming back to .github/workflows Reason: Focusing on beta release stability before enabling CI
- Renamed .github/dependabot.yml to .github/dependabot.yml.disabled - Stops automatic dependency update PRs - Prevents Dependabot from triggering workflows This completes the CI shutdown - no automated runs will occur.
- Add detailed README with badges, installation, and quick start - Link all documentation from docs/ folder - Restore GitHub Actions workflows (ci.yml, codeql.yml, dependabot-auto-merge.yml) - Restore Dependabot configuration - Include architecture diagram and feature overview - Add development, testing, and deployment guides
- Fix GitHub showing .github/README.md instead of root README.md - Rename to WORKFLOWS.md to preserve workflow documentation
- Remove corrupted/duplicate content - Validate all features exist in codebase (circuit breaker, rate limiter, webhooks, etc.) - Fix documentation links to actual docs/ folder structure - Add proper sectioning with horizontal rules - Clean up disabled workflow artifacts
- Add npm package information section (name, registry, version, size) - Include CLI command usage after global install - Add npx usage examples - Include 'Usage as a Module' section with code example - Add all installation methods (global, npx, dependency) - Clean, verified content with no duplicates
Dependabot couldn't find the original pull request head commit, 1fd7df7.
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/admin-ui/web-vitals-5.1.0
branch
from
1fd7df7 to
18a20cf
Compare
Author
|
A newer version of web-vitals exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps web-vitals from 2.1.4 to 5.1.0.
Changelog
Sourced from web-vitals's changelog.
... (truncated)
Commits
1b872cfRelease v5.1.0f6cb466Update CHANGELOG for 5.1.0e5f6e2dRegister visibility-change early (#637)1852851Only finalize LCP on user events (isTrusted=true) (#635)f16c4b4Fallback to default getSelector if custom function is null or undefined (#634)8a54167Release v5.0.361f7c36Update CHANGELOG for 5.0.3e22d23bRemove visibiliytchange event listeners when no longer required (#627)1509d64Upgrade examples in README to v5 (#626)463abbdRelease v5.0.2Maintainer changes
This version was pushed to npm by tunetheweb, a new releaser for web-vitals since your current version.
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)