Skip to content

Conversation

@benceruleanlu
Copy link
Member

No description provided.

Copilot AI review requested due to automatic review settings January 5, 2026 20:00
@benceruleanlu benceruleanlu requested a review from a team as a code owner January 5, 2026 20:00
@dosubot dosubot bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Jan 5, 2026
@coderabbitai
Copy link

coderabbitai bot commented Jan 5, 2026

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (1)
  • backport

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

📝 Walkthrough

Walkthrough

This pull request updates dependency versions across compiled requirements files for multiple operating systems. The comfyui-workflow-templates package is bumped to version 0.7.64, and the frontend and ComfyUI version configurations are incremented in package.json and the core requirements patch file.

Changes

Cohort / File(s) Summary
Platform-Specific Compiled Requirements
assets/requirements/macos.compiled, assets/requirements/windows_amd.compiled, assets/requirements/windows_cpu.compiled, assets/requirements/windows_nvidia.compiled
Bumped comfyui-workflow-templates to version 0.7.64 across all platform-specific compiled requirement files.
Configuration and Patch Files
package.json, scripts/core-requirements.patch
Updated version configurations: config.frontend.version to 1.35.9, config.comfyUI.version to 0.7.0, and bumped comfyui-frontend-package and comfyui-workflow-templates versions in the requirements patch.

Possibly related PRs


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security
Copy link

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm entities is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: ?npm/entities@4.5.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@4.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm safer-buffer is 94.0% likely obfuscated

Confidence: 0.94

Location: Package overview

From: ?npm/electron-builder@25.1.8npm/@playwright/test@1.49.1npm/@sentry/wizard@3.38.0npm/@sentry/vite-plugin@2.23.0npm/@electron/rebuild@4.0.1npm/@todesktop/cli@1.15.2npm/vite@7.1.3npm/node-pty@1.1.0-beta39npm/safer-buffer@2.1.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/safer-buffer@2.1.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@benceruleanlu benceruleanlu merged commit bcba608 into main Jan 5, 2026
24 of 26 checks passed
@benceruleanlu benceruleanlu deleted the bl-bump-core-to-0.7.0 branch January 5, 2026 20:01
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps the ComfyUI core version from 0.6.0 to 0.7.0, along with updating related frontend and workflow template package versions to maintain compatibility.

  • Updates ComfyUI core version to 0.7.0 and frontend package to 1.35.9 in package.json
  • Updates comfyui-workflow-templates from 0.7.63 to 0.7.64 (and from 0.7.59 for AMD)
  • Reflects frontend package version change in the core-requirements.patch file

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updates frontend version to 1.35.9 and comfyUI core version to 0.7.0
scripts/core-requirements.patch Updates patch to reflect frontend package version bump to 1.35.9 and workflow templates to 0.7.64
assets/requirements/windows_nvidia.compiled Updates comfyui-workflow-templates dependency to 0.7.64
assets/requirements/windows_cpu.compiled Updates comfyui-workflow-templates dependency to 0.7.64
assets/requirements/windows_amd.compiled Updates comfyui-workflow-templates dependency from 0.7.59 to 0.7.64
assets/requirements/macos.compiled Updates comfyui-workflow-templates dependency to 0.7.64

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Release size:S This PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants