Repository navigation
chore(deps-fe)(deps): bump @tanstack/react-query from 5.103.2 to 5.104.0 in /frontend in the frontend-framework group - #635
Conversation
Bumps the frontend-framework group in /frontend with 1 update: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query). Updates `@tanstack/react-query` from 5.103.2 to 5.104.0 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.0/packages/react-query) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.104.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-framework ... Signed-off-by: dependabot[bot] <support@github.com>
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
🔴 NSE Evidence Report — #635Status: FAIL · Branch: 🔗 Revision
Overall🔴 FAIL Required CI checks contain failures. Primary affected files:
🧪 Test Matrix
🔴 Affected Files
|
| Workflow | Job | Status | Details |
|---|---|---|---|
CI |
Aggregate CI Results |
⏭️ SKIPPED | logs |
CI |
Heavy CI (${{ matrix.suite }}) |
⏭️ SKIPPED | logs |
CI |
Extended Validation (Tier 2) |
⏭️ SKIPPED | logs |
CI |
Full Runtime Overall Verdict |
✅ SUCCESS | logs |
CI |
DB Fabric Certification (SQLite ↔ PostgreSQL) |
✅ SUCCESS | logs |
GitHub Advanced Security |
Trivy |
✅ SUCCESS | logs |
GitHub Advanced Security |
CodeQL |
✅ SUCCESS | logs |
Docs |
Deploy GitHub Pages |
⏭️ SKIPPED | logs |
GitHub Advanced Security |
osv-scanner |
✅ SUCCESS | logs |
Socket Security |
Socket Security: Pull Request Alerts |
✅ SUCCESS | logs |
Code scanning AI findings on PR #635 |
github-advanced-security |
❌ FAILURE | logs |
Tests (OS Matrix) |
Py Tests (windows-latest) |
✅ SUCCESS | logs |
Tests (OS Matrix) |
Py Tests (macos-latest) |
✅ SUCCESS | logs |
OSV Dependency Scan |
OSV Scanner / osv-scan |
✅ SUCCESS | logs |
Go API |
Go API (ubuntu-latest) |
✅ SUCCESS | logs |
Go API |
React ↔ Go API Contract (Ubuntu) |
✅ SUCCESS | logs |
Security |
Trivy Vulnerability Scan |
✅ SUCCESS | logs |
Docs |
Validate documentation |
✅ SUCCESS | logs |
Go API |
Go API (windows-latest) |
✅ SUCCESS | logs |
CI |
Full NSE Runtime (sqlite) |
✅ SUCCESS | logs |
CI |
Code Quality & Tests |
✅ SUCCESS | logs |
Lockfile Diff |
Dependency Manifest Diff |
✅ SUCCESS | logs |
Dependency Lock & Migration Safety |
Migration safety (fail-loud + version postconditions) |
✅ SUCCESS | logs |
CI |
MetaTrader 5 Wine Runtime |
✅ SUCCESS | logs |
CI |
Full NSE Runtime (postgres) |
✅ SUCCESS | logs |
JS Tests |
Frontend JS Unit Tests |
✅ SUCCESS | logs |
Security |
CodeQL Analysis |
✅ SUCCESS | logs |
Dependency Lock & Migration Safety |
Dependency drift (lock vs pyproject) |
✅ SUCCESS | logs |
CI |
CI Integrity and Change Classification |
✅ SUCCESS | logs |
Socket Security |
Socket Security: Project Report |
✅ SUCCESS | logs |
🟢 Final Verdict — Merge? Yes
Every merge precondition observed is satisfied:
- 1 check(s) not green:
github-advanced-security— the base branch's required list could not be read, so GitHub's own mergeability answer is used instead. - Not observed: which checks the base branch requires, required-review count — could not be read.
- GitHub reports this PR is mergeable, which already accounts for the unreadable rules above.
NSE Evidence Report — generated by nse pr report. Statuses are deterministic: 🟢 PASS · 🟡 IN PROGRESS · 🟠 BLOCKED · 🔴 FAIL · ⚪ UNKNOWN. unknown = the evidence did not determine it. This comment is updated in place; it never duplicates.
Dependabot bumps pyproject.toml ranges but cannot run uv pip compile, so the compiled artifacts must ship in the same PR (see .github/dependabot.yml lockfile-safe contract). Regenerated with uv 0.12.10 --python-version 3.11.
Bumps the frontend-framework group in /frontend with 1 update: @tanstack/react-query.
Updates
@tanstack/react-queryfrom 5.103.2 to 5.104.0Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
d4033ebci: Version Packages (#11651)5279b05chore(deps): update Vite from v6 to v8 (#11650)fe053bfci: Version Packages (#11612)1c9693efix(codemods): update codemods build script (#11647)f00aad6chore(deps): update dev dependencies (#11640)2443290test(*): rename 'console.error' spies to 'consoleErrorMock' (#11646)fcab29ftest({query-core,react-query,preact-query}): restore the previous 'isServer' ...e8dacbedocs({react-query,preact-query,solid-query,svelte-query}/README): point the C...57f40ebchore(deps): update non-major dependencies (#11625)397ad07test({query-core,react-query,preact-query,solid-query}): pass 'unhandledRejec...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions