Skip to content

chore(deps): bump @fortawesome/free-brands-svg-icons from 7.2.0 to 7.3.1 - #527

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fortawesome/free-brands-svg-icons-7.3.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fortawesome/free-brands-svg-icons-7.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps @fortawesome/free-brands-svg-icons from 7.2.0 to 7.3.1.

Release notes

Sourced from @​fortawesome/free-brands-svg-icons's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Release 7.3.0

Change log available at https://fontawesome.com/docs/changelog/

Commits
Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @​fortawesome/free-brands-svg-icons since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@fortawesome/free-brands-svg-icons](https://github.com/FortAwesome/Font-Awesome) from 7.2.0 to 7.3.1.
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.1)

---
updated-dependencies:
- dependency-name: "@fortawesome/free-brands-svg-icons"
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
Copilot AI balanced review requested due to automatic review settings September 6, 2026 20:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown

🗑️ Preview Environment Cleaned Up

The preview container for this PR has been deleted.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Dharp02 added a commit that referenced this pull request Sep 21, 2026
Resolves ten of the eleven open Dependabot PRs as one lockfile, so the
combined end state is what gets tested rather than only the last merge in a
rebase chain. The eleventh (#520, kerebron) is deliberately left open --
see the note at the end.

Security/patch updates, all transitive and lockfile-only (#545, #541, #529):
  devalue  5.9.0  -> 5.9.4   (via svelte, build tooling)
  js-yaml  4.3.1  -> 4.3.2   (via eslintrc/cosmiconfig/@mieweb/ychart)
  joi      18.2.1 -> 18.2.9  (via wait-on, dev only)

Routine bumps (#528, #525, #532):
  @capacitor/device 8.0.2   -> 8.0.3
  @types/react      19.2.14 -> 19.2.18
  vitest            4.1.5   -> 4.1.11 (dev)

@FortAwesome 7.2.0 -> 7.3.1, all six packages together (fixes #527):
Dependabot bumped only free-brands-svg-icons, which installed a nested
@fortawesome/fontawesome-common-types@7.3.1 beside the hoisted 7.2.0. Two
copies of that package are two distinct TypeScript identities, so every
IconDefinition crossing between them failed to typecheck -- 9 TS2322 errors
across socialProviders, BottomNav, GitHubConnectionRow, LandingPage and
UserDropdown. Bumping the set in lockstep collapses it back to a single
hoisted copy and the errors go with it.

Drop @babel/runtime (closes #526):
Dependabot proposed 7.29.7 -> 8.0.0, but @testing-library/dom,
@testing-library/react and react-i18next all require ^7, which cannot accept
8.x. The bump therefore installs a fourth copy -- an unused 8.0.5 at the root
plus three nested 7.29.7 -- and nothing under src/ imports @babel/runtime at
all; the entry is vestigial from the starter template this repo began as.
Removing it leaves a single hoisted 7.29.7 for the three real consumers.

Bundle impact measured against main: entry chunk 844 -> 852 KB gzipped
(+0.9%), deploy artifact +116 KB (+0.2%). Effectively neutral.

@Kerebron stays at 0.8.9. 0.8.12 costs +73 KB gzipped on the entry chunk
(+8.6%) and +5.5 MB on the deploy artifact, because extension-basic-editor
picks up temml (a second TeX renderer alongside the rehype-katex the app
already uses), a tree-sitter-bash grammar and a debug build of
web-tree-sitter. It also cannot be verified here: the editor's failure mode
is silent -- a chunk that fails to load renders an empty box -- and the e2e
specs that would catch it need a Meteor backend that never answers /health
in this environment. Left for its own change.

App version deliberately untouched at 1.0.3, and no release note: dependency
maintenance is not user-visible.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@Dharp02 Dharp02 closed this in #549 Sep 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/fortawesome/free-brands-svg-icons-7.3.1 branch September 21, 2026 15:40
@Dharp02

Dharp02 commented Sep 21, 2026

Copy link
Copy Markdown
Collaborator

Closing in favour of #549, which fixes this rather than just landing it.

This PR was red, and the cause was the partial bump. Moving only free-brands-svg-icons to 7.3.1 installed a nested @fortawesome/fontawesome-common-types@7.3.1 beside the hoisted 7.2.0:

node_modules/@fortawesome/fontawesome-common-types                             7.2.0
node_modules/@fortawesome/free-brands-svg-icons                                7.3.1
node_modules/@fortawesome/free-brands-svg-icons/node_modules/
    @fortawesome/fontawesome-common-types                                      7.3.1

Two copies of that package are two distinct TypeScript identities, so every IconDefinition crossing between them failed to compile — 9 TS2322 errors across socialProviders.ts, BottomNav.tsx, GitHubConnectionRow.tsx, LandingPage.tsx and UserDropdown.tsx. Reproduced locally before fixing.

#549 bumps all six @fortawesome packages to 7.3.1 in lockstep, which collapses the tree back to a single hoisted fontawesome-common-types and takes the errors with it. Icons were confirmed rendering at runtime (22 FontAwesome icons including fab/github, 0 console errors).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants