chore(deps): bump @fortawesome/free-brands-svg-icons from 7.2.0 to 7.3.1 - #527
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@fortawesome/free-brands-svg-icons](https://github.com/FortAwesome/Font-Awesome) from 7.2.0 to 7.3.1. - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.2.0...7.3.1) --- updated-dependencies: - dependency-name: "@fortawesome/free-brands-svg-icons" dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
🗑️ Preview Environment Cleaned UpThe preview container for this PR has been deleted. |
Resolves ten of the eleven open Dependabot PRs as one lockfile, so the combined end state is what gets tested rather than only the last merge in a rebase chain. The eleventh (#520, kerebron) is deliberately left open -- see the note at the end. Security/patch updates, all transitive and lockfile-only (#545, #541, #529): devalue 5.9.0 -> 5.9.4 (via svelte, build tooling) js-yaml 4.3.1 -> 4.3.2 (via eslintrc/cosmiconfig/@mieweb/ychart) joi 18.2.1 -> 18.2.9 (via wait-on, dev only) Routine bumps (#528, #525, #532): @capacitor/device 8.0.2 -> 8.0.3 @types/react 19.2.14 -> 19.2.18 vitest 4.1.5 -> 4.1.11 (dev) @FortAwesome 7.2.0 -> 7.3.1, all six packages together (fixes #527): Dependabot bumped only free-brands-svg-icons, which installed a nested @fortawesome/fontawesome-common-types@7.3.1 beside the hoisted 7.2.0. Two copies of that package are two distinct TypeScript identities, so every IconDefinition crossing between them failed to typecheck -- 9 TS2322 errors across socialProviders, BottomNav, GitHubConnectionRow, LandingPage and UserDropdown. Bumping the set in lockstep collapses it back to a single hoisted copy and the errors go with it. Drop @babel/runtime (closes #526): Dependabot proposed 7.29.7 -> 8.0.0, but @testing-library/dom, @testing-library/react and react-i18next all require ^7, which cannot accept 8.x. The bump therefore installs a fourth copy -- an unused 8.0.5 at the root plus three nested 7.29.7 -- and nothing under src/ imports @babel/runtime at all; the entry is vestigial from the starter template this repo began as. Removing it leaves a single hoisted 7.29.7 for the three real consumers. Bundle impact measured against main: entry chunk 844 -> 852 KB gzipped (+0.9%), deploy artifact +116 KB (+0.2%). Effectively neutral. @Kerebron stays at 0.8.9. 0.8.12 costs +73 KB gzipped on the entry chunk (+8.6%) and +5.5 MB on the deploy artifact, because extension-basic-editor picks up temml (a second TeX renderer alongside the rehype-katex the app already uses), a tree-sitter-bash grammar and a debug build of web-tree-sitter. It also cannot be verified here: the editor's failure mode is silent -- a chunk that fails to load renders an empty box -- and the e2e specs that would catch it need a Meteor backend that never answers /health in this environment. Left for its own change. App version deliberately untouched at 1.0.3, and no release note: dependency maintenance is not user-visible. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
|
Closing in favour of #549, which fixes this rather than just landing it. This PR was red, and the cause was the partial bump. Moving only Two copies of that package are two distinct TypeScript identities, so every #549 bumps all six |
Bumps @fortawesome/free-brands-svg-icons from 7.2.0 to 7.3.1.
Release notes
Sourced from @fortawesome/free-brands-svg-icons's releases.
Commits
14c65a3Release 7.3.1 (#21630)70fb2ddRelease 7.3.0 (#21612)Maintainer changes
This version was pushed to npm by fortawesome-admin, a new releaser for
@fortawesome/free-brands-svg-iconssince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)