Refresh workspace dependencies#170
Conversation
There was a problem hiding this comment.
Pull request overview
Refreshes dependency versions across the Exceptionless.JavaScript monorepo (core SDK packages plus example apps) to align on current compatible tooling, reduce known vulnerabilities via overrides, and keep the build/test toolchain consistent across workspaces.
Changes:
- Bumps
esbuildacross all SDK packages and updates rootallowScriptsaccordingly. - Updates framework/example dependencies (React, Vue, Vite, SvelteKit, Next.js, Expo/RN) and adds the missing
@testing-library/domdependency for the React example. - Adds root
overridesto pin@react-native-async-storage/async-storageand patch vulnerable transitive dependencies (cookie,postcss,uuid).
Reviewed changes
Copilot reviewed 14 out of 15 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| package.json | Updates shared dev deps (React/Vitest), updates allowScripts, and adds dependency overrides for security/compatibility pins. |
| packages/core/package.json | Bumps esbuild used for bundling core package outputs. |
| packages/browser/package.json | Bumps esbuild used for bundling browser package outputs. |
| packages/angularjs/package.json | Bumps esbuild used for bundling AngularJS wrapper outputs. |
| packages/node/package.json | Bumps esbuild and updates @types/node for Node package development/build. |
| packages/react/package.json | Updates React type dependencies and bumps esbuild for the React wrapper bundle. |
| packages/react-native/package.json | Pins AsyncStorage dev dependency for Expo/RN compatibility and updates React types. |
| packages/vue/package.json | Bumps esbuild used for bundling Vue wrapper outputs. |
| example/browser/package.json | Updates Vite for the browser sample app. |
| example/react/package.json | Updates React/Vite tooling and adds @testing-library/dom to satisfy testing-library peer requirements. |
| example/vue/package.json | Updates Vue/compiler and Vite for the Vue sample app. |
| example/svelte-kit/package.json | Updates SvelteKit/Svelte/Vite/Vitest versions for the SvelteKit sample app. |
| example/nextjs/package.json | Updates Next.js and aligns React versions for the Next.js sample app. |
| example/expo/package.json | Upgrades Expo SDK and React Native version while keeping Expo-pinned React and AsyncStorage versions. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 19e8d457aa
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Summary
Compatibility decisions
expo install --checkpassesSecurity
npm auditbefore: 21 vulnerabilities (including 1 critical and 2 high)npm auditafter: 0 vulnerabilitiesValidation
npx -y npm@11 cinpm run buildnpm test(346 tests)npm run lintnpm run check --workspace=example/svelte-kitnpm ls --depth=0npx expo install --checknpx expo export --platform iosnode --check example/express/app.js