Skip to content

fix(deps): update npm minor and patch dependencies#207

Open
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/npm-minor-and-patch-dependencies
Open

fix(deps): update npm minor and patch dependencies#207
red-hat-konflux[bot] wants to merge 1 commit intomasterfrom
konflux/mintmaker/master/npm-minor-and-patch-dependencies

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Dec 5, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@data-driven-forms/pf4-component-mapper (source) ^4.1.4 -> ^4.1.15 age confidence dependencies patch
@data-driven-forms/react-form-renderer (source) ^4.1.4 -> ^4.1.13 age confidence dependencies patch
@patternfly/react-core ^6.4.0 -> ^6.4.1 age confidence dependencies patch
@patternfly/react-table (source) ^6.4.0 -> ^6.4.1 age confidence dependencies patch
@playwright/test (source) 1.58.0 -> 1.58.2 age confidence devDependencies patch
@redhat-cloud-services/frontend-components-config (source) ^6.7.4 -> ^6.7.54 age confidence devDependencies patch
@redhat-cloud-services/tsc-transform-imports (source) ^1.0.26 -> ^1.0.56 age confidence devDependencies patch
@storybook/addon-docs (source) ^9.1.17 -> ^9.1.20 age confidence devDependencies patch
@storybook/react-webpack5 (source) ^9.1.17 -> ^9.1.20 age confidence devDependencies patch
@storybook/test-runner ^0.23.0 -> ^0.24.2 age confidence devDependencies minor
@types/react (source) 18.3.27 -> 18.3.28 age confidence devDependencies patch
axios (source) ^1.13.2 -> ^1.13.6 age confidence dependencies patch
msw (source) 2.12.10 -> 2.12.13 age confidence devDependencies patch
node (source) >=18 -> >=18.20.8 age confidence engines minor
react-intl (source) ^6.6.2 -> ^6.8.9 age confidence dependencies patch
react-router-dom (source) ^6.30.2 -> ^6.30.3 age confidence dependencies patch
remark-gfm ^4.0.0 -> ^4.0.1 age confidence devDependencies patch
storybook (source) ^9.1.17 -> ^9.1.20 age confidence devDependencies patch
ts-jest (source) ^29.4.5 -> ^29.4.6 age confidence devDependencies patch
yaml (source) ^2.8.1 -> ^2.8.2 age confidence dependencies patch

Release Notes

data-driven-forms/react-forms (@​data-driven-forms/pf4-component-mapper)

v4.1.15

Compare Source

4.1.15 (2026-03-09)

🩹 Fixes
  • wizard: show submit button correctly (c7f896f1)
🧱 Updated Dependencies
❤️ Thank You
  • LightOfHeaven1994

v4.1.14

Compare Source

4.1.14 (2026-02-16)

🧱 Updated Dependencies

v4.1.13

Compare Source

4.1.13 (2026-02-11)

🚀 Features
🧱 Updated Dependencies
❤️ Thank You

v4.1.12

Compare Source

4.1.12 (2026-02-09)

🧱 Updated Dependencies

v4.1.11

Compare Source

4.1.11 (2026-02-05)

🚀 Features
  • pf: migrate PF mapper to TS (e22ef36b)
🧱 Updated Dependencies
❤️ Thank You

v4.1.10

Compare Source

4.1.10 (2026-02-04)

🧱 Updated Dependencies

v4.1.9

Compare Source

4.1.9 (2026-02-02)

🧱 Updated Dependencies

v4.1.8

Compare Source

4.1.8 (2026-02-02)

🧱 Updated Dependencies
microsoft/playwright (@​playwright/test)

v1.58.2

Compare Source

Highlights

#​39121 fix(trace viewer): make paths via stdin work
#​39129 fix: do not force swiftshader on chromium mac

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

v1.58.1

Compare Source

Highlights

#​39036 fix(msedge): fix local network permissions
#​39037 chore: update cft download location
#​38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0
RedHatInsights/frontend-components (@​redhat-cloud-services/frontend-components-config)

v6.7.54

Compare Source

v6.7.53

Compare Source

v6.7.52

Compare Source

storybookjs/test-runner (@​storybook/test-runner)

v0.24.2

Compare Source

🐛 Bug Fix
Authors: 1

v0.24.1

Compare Source

🐛 Bug Fix
Authors: 3

v0.24.0

Compare Source

🚀 Enhancement
🐛 Bug Fix
Authors: 3

axios/axios (axios)

v1.13.6

Compare Source

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

  • Breaking Changes: None identified in this release.
  • Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

  • React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @​moh3n9595 for the initial implementation. (#​5764)
  • Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#​7385)

🐛 Bug Fixes

  • Environment Compatibility:

    • Fixed module exports for React Native and Browserify environments. (#​7386)
    • Added safe FormData detection for the WeChat Mini Program environment. (#​7324)
  • Error Handling:

    • AxiosError.message is now correctly enumerable. (#​7392)
    • AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#​7403)

🔧 Maintenance & Chores

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

Full Changelog: v1.13.5...v1.13.6

v1.13.5

Compare Source

Release 1.13.5

Highlights
  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #​7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #​7368)
Changes
Security
  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #​7369)
Fixes
  • Fix/5657. (PR #​7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #​7368)
Features / Improvements
  • Add input validation to isAbsoluteURL. (PR #​7326)
  • Refactor: bump minor package versions. (PR #​7356)
Documentation
  • Clarify object-check comment. (PR #​7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #​7371)
CI / Maintenance
  • Chore: fix issues with YAML. (PR #​7355)
  • CI: update workflow YAMLs. (PR #​7372)
  • CI: fix run condition. (PR #​7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #​7360)
  • Chore(release): prepare release 1.13.5. (PR #​7379)
New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

mswjs/msw (msw)

v2.12.13

Compare Source

v2.12.13 (2026-03-17)

Bug Fixes

v2.12.12

Compare Source

v2.12.12 (2026-03-17)

Bug Fixes

v2.12.11

Compare Source

v2.12.11 (2026-03-15)

Bug Fixes
nodejs/node (node)

v18.20.8: 2025-03-27, Version 18.20.8 'Hydrogen' (LTS), @​richardlau

Compare Source

Notable Changes

This release updates OpenSSL to 3.0.16 and root certificates to NSS 3.108.

Commits

v18.20.7: 2025-02-20, Version 18.20.7 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes
  • CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
  • CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

  • CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
Commits

v18.20.5: 2024-11-12, Version 18.20.5 'Hydrogen' (LTS), @​aduh95

Compare Source

Notable Changes
  • [ac37e554a5] - esm: mark import attributes and JSON module as stable (Nicolò Ribaudo) #​55333
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from 6560682 to 857113d Compare January 5, 2026 20:40
@coderabbitai
Copy link

coderabbitai bot commented Jan 5, 2026

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Walkthrough

Bumped multiple dependency and devDependency versions in package.json (data-driven-forms, PatternFly, axios, react-intl, react-router-dom, yaml, Playwright, Red Hat frontend packages, tsc-transform-imports, ts-jest, type defs). No packages added/removed, and no script or public API changes.

Changes

Cohort / File(s) Summary
Dependency Version Updates
package.json
Updated dependency/devDependency versions: @data-driven-forms/pf4-component-mapper ^4.1.4→^4.1.12, @data-driven-forms/react-form-renderer ^4.1.4→^4.1.11, @patternfly/react-core ^6.4.0→^6.4.1, @patternfly/react-table ^6.4.0→^6.4.1, axios ^1.13.2→^1.13.5, react-intl ^6.6.2→^6.8.9, react-router-dom ^6.30.2→^6.30.3, yaml ^2.8.1→^2.8.2, @playwright/test ^1.56.1→^1.58.2, @redhat-cloud-services/frontend-components-config ^6.7.4→^6.7.51, @redhat-cloud-services/tsc-transform-imports ^1.0.26→^1.0.53, ts-jest ^29.4.5→^29.4.6, @types/react 18.3.27→18.3.28. No script or public API changes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The PR title accurately describes the primary change: updating npm dependencies to their minor and patch versions.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check ✅ Passed The PR description clearly details dependency version updates with a comprehensive table showing package names, version changes, and release notes.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
  • 📝 Generate docstrings (stacked PR)
  • 📝 Generate docstrings (commit on current branch)
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/master/npm-minor-and-patch-dependencies
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 8 times, most recently from 35e9b7f to 3bcd890 Compare January 8, 2026 00:39
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 4 times, most recently from 551d65f to d39038a Compare January 20, 2026 20:37
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 5 times, most recently from 5fa536b to 88e8f23 Compare January 28, 2026 00:37
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 2 times, most recently from 9bd2036 to 340f242 Compare January 31, 2026 00:45
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In `@package.json`:
- Around line 24-42: The engines declaration in package.json is incompatible
with the PatternFly v6 dependencies; update the "engines" field's "node"
constraint to ">=18.0.0" to match PatternFly v6 requirements, or alternatively
downgrade the PatternFly packages (`@patternfly/react-core`,
`@patternfly/react-table`, `@patternfly/quickstarts` and related PatternFly v6
entries) to v5; locate the "engines" object in package.json and change the
"node" value to ">=18.0.0" (or pin the PatternFly package versions to v5) so the
declared Node version aligns with the installed PatternFly packages.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 7 times, most recently from e8385fe to afeec24 Compare February 8, 2026 16:45
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from afeec24 to 58e2852 Compare February 9, 2026 20:40
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 3 times, most recently from 337f54e to 89faa9d Compare February 16, 2026 16:58
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 4 times, most recently from 182377d to 5d4eafa Compare February 28, 2026 01:14
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 3 times, most recently from 907d9d2 to e271252 Compare March 9, 2026 14:05
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from e271252 to dcf2db9 Compare March 12, 2026 13:11
@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Mar 12, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: learning-resources-app@1.1.0
npm error Found: storybook@9.1.20
npm error node_modules/storybook
npm error   dev storybook@"^9.1.20" from the root project
npm error
npm error Could not resolve dependency:
npm error peer storybook@"^0.0.0-0 || ^10.0.0 || ^10.0.0-0 || ^10.1.0-0 || ^10.2.0-0 || ^10.3.0-0" from @storybook/test-runner@0.24.2
npm error node_modules/@storybook/test-runner
npm error   dev @storybook/test-runner@"^0.24.2" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2026-03-17T17_18_07_999Z-eresolve-report.txt
npm notice
npm notice New patch version of npm available! 11.11.0 -> 11.11.1
npm notice Changelog: https://github.com/npm/cli/releases/tag/v11.11.1
npm notice To update run: npm install -g npm@11.11.1
npm notice
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-03-17T17_18_07_999Z-debug-0.log

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch 2 times, most recently from 3139b52 to 490ed40 Compare March 17, 2026 05:21
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/master/npm-minor-and-patch-dependencies branch from 490ed40 to e379587 Compare March 17, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants