Skip to content

fix: bump am-lyrics to 1.6.1 so line mode keeps the main lyric line - #191

Merged
boidushya merged 1 commit into
masterfrom
chore/bump-am-lyrics-1.6.1
Sep 2, 2026
Merged

fix: bump am-lyrics to 1.6.1 so line mode keeps the main lyric line#191
boidushya merged 1 commit into
masterfrom
chore/bump-am-lyrics-1.6.1

Conversation

@boidushya

Copy link
Copy Markdown
Member

Composer's lockfile pinned @uimaxbai/am-lyrics at 1.5.6, which drops the main lyric line in line-by-line preview whenever the line also has background vocals, so only the word-synced backing vocals show. 1.6.1 parses that case correctly, so bump the dependency and refresh the lock.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​uimaxbai/​am-lyrics@​1.5.6 ⏵ 1.6.180 +21009995 +170

View full report

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Medium
Low adoption: npm @uimaxbai/am-lyrics

Location: Package overview

From: package.jsonnpm/@uimaxbai/am-lyrics@1.6.1

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@uimaxbai/am-lyrics@1.6.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 2, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
composer ff287fa Commit Preview URL

Branch Preview URL
Sep 02 2026, 07:38 PM

@boidushya
boidushya merged commit 0f8b6cc into master Sep 2, 2026
7 checks passed
@boidushya
boidushya deleted the chore/bump-am-lyrics-1.6.1 branch September 2, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant