Conversation
Bumps the npm_and_yarn group with 4 updates in the /project/frontend directory: [js-yaml](https://github.com/nodeca/js-yaml), [lodash](https://github.com/lodash/lodash), [mdast-util-to-hast](https://github.com/syntax-tree/mdast-util-to-hast) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router). Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `mdast-util-to-hast` from 13.2.0 to 13.2.1 - [Release notes](https://github.com/syntax-tree/mdast-util-to-hast/releases) - [Commits](syntax-tree/mdast-util-to-hast@13.2.0...13.2.1) Updates `react-router` from 7.9.5 to 7.13.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.13.0/packages/react-router) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mdast-util-to-hast dependency-version: 13.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: react-router dependency-version: 7.13.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
…rn/project/frontend/npm_and_yarn-f7ab689b53
There was a problem hiding this comment.
Pull request overview
This is a Dependabot PR to update react-router-dom from ^7.9.5 to ^7.13.0 in the frontend package dependencies. The update includes transitive dependency version bumps for hundreds of packages in the lock file.
Changes:
- Update react-router-dom to version 7.13.0 (minor version bump)
- Update react-router dependency to 7.13.0
- Update numerous transitive dependencies across the dependency tree
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 13 comments.
| File | Description |
|---|---|
| project/frontend/package.json | Updates react-router-dom from ^7.9.5 to ^7.13.0 |
| project/frontend/package-lock.json | Updates lock file with new version hashes and transitive dependency updates, contains critical JSON syntax errors |
| @@ -2291,6 +2277,7 @@ | |||
| "integrity": "sha512-kIU8SLQkYWGp3pVKiYzA5OSaNF5EE03P/R8zEmmrG6XwOg5oBjXyQVVIauQ0dgau4zYhpZEhJrvIYt6oM+zZZA==", | |||
| "license": "MIT", | |||
| "peer": true, | |||
| "peer": true, | |||
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @octokit/core package entry. The "peer" property appears twice on consecutive lines (2279 and 2280), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, |
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @types/react package entry. The "peer" property appears twice on consecutive lines (5406 and 5407), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| @@ -5140,11 +5166,12 @@ | |||
| "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==", | |||
| "dev": true, | |||
| "license": "MIT" | |||
| "license": "MIT" | |||
There was a problem hiding this comment.
Duplicate "license": "MIT" property detected in the @types/aria-query package entry. The "license" property appears twice on consecutive lines (5168 and 5169), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "license": "MIT" |
| "dev": true, | ||
| "license": "MIT", | ||
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @babel/core package entry. The "peer" property appears twice on consecutive lines (220 and 221), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, |
| "license": "MIT", | ||
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @codemirror/view package entry. The "peer" property appears twice on consecutive lines (581 and 582), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, |
| "license": "Apache-2.0", | ||
| "peer": true |
There was a problem hiding this comment.
Duplicate "license" and "peer" properties detected in the @firebase/app-types package entry. Both the "license" property (lines 1471 and 1473) and "peer" property (lines 1472 and 1474) appear twice. This is invalid JSON and will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - the duplicate lines (1473-1474) should be removed.
| "license": "Apache-2.0", | |
| "peer": true |
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @types/react-dom package entry. The "peer" property appears twice on consecutive lines (5418 and 5419), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @typescript-eslint/parser package entry. The "peer" property appears twice on consecutive lines (5475 and 5476), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "license": "Apache-2.0", | ||
| "peer": true, | ||
| "peer": true, |
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @firebase/app-compat package entry. The "peer" property appears twice on consecutive lines (1454 and 1455), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, |
| @@ -1900,6 +1923,7 @@ | |||
| "hasInstallScript": true, | |||
| "license": "Apache-2.0", | |||
| "peer": true, | |||
| "peer": true, | |||
There was a problem hiding this comment.
Duplicate "peer": true property detected in the @firebase/util package entry. The "peer" property appears twice on consecutive lines (1925 and 1926), which is invalid JSON. This will cause package-lock.json parsing errors and prevent npm install from working correctly. This needs to be fixed before merging - one of the duplicate lines must be removed.
| "peer": true, |
update package versions