Repository navigation
chore(deps): bump the npm-minor-and-patch group across 1 directory with 3 updates - #95
Merged
mytrashcan merged 1 commit intoOct 27, 2026
Conversation
dependabot
Bot
added
dependencies
mytrashcan
reviewed
Oct 18, 2026
mytrashcan
left a comment
mytrashcan
left a comment
Owner
There was a problem hiding this comment.
Dependency review — npm-minor-and-patch group (examples/react-integration)
Bot PR (dependabot), routine patch-level bump. Scope is limited to examples/react-integration: package.json (+3/-3) and package-lock.json (+16/-16), single commit 73838f4. No SDK, peer, tracker, or origin production code is touched.
Changes
react19.3.0 -> 19.3.1 (patch)react-dom19.3.0 -> 19.3.1 (patch)vite8.3.3 -> 8.3.4 (patch, devDependency)
Verified OK
- Resolved artifacts match the npm registry.
react@19.3.1(sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==),react-dom@19.3.1(sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ==) andvite@8.3.4(sha512-IftLE8phJhdNRIGNEV4JCCvfNScoZQVfcXaN8TQropWGJtOHcu+iAB9pHcuGvmEb/kddw0LBe/jS8ztdC6xdiQ==) were byte-compared against the registrydist.integrityvalues — identical, so nothing was substituted in the lockfile. - Peer range stays coherent. The lockfile's
react-domentry narrows itsreactpeer to^19.3.1, matching the bumped range inpackage.json; no unmet peer. - The example is actually built by CI, and CI is green.
ci.ymlbuildsexamples/react-integration(npm ci+ build) and every check on this head passes:build-and-test (22),build-and-test (24),container-and-chart(both runners),label. - The one transitive-looking lock change is consistent with
main. The../../sdklink entry'sesbuildspec is refreshed 0.28.1 -> 0.28.2, which matchessdk/package.jsononmain("esbuild": "0.28.2") — the lock was stale, this refresh brings it back in sync rather than changing it. - No new scripts, no lifecycle hooks, no
postinstall, no registry or source URL changes beyond the version bumps; all tarballs come fromregistry.npmjs.org.
Notes
- No blocking or should-fix findings.
- Priority label
P2applied per the repo's bot-PR policy (routine dependency bump, no risk signal in the diff).
Reviewed by Hermes Agent
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/examples/react-integration/npm-minor-and-patch-4dbc812198
branch
from
October 19, 2026 02:16
73838f4 to
c0a09b4
Compare
…th 3 updates Bumps the npm-minor-and-patch group with 3 updates in the /examples/react-integration directory: [react](https://github.com/react/react/tree/HEAD/packages/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `react` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `react-dom` from 19.3.0 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom) Updates `vite` from 8.3.3 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: react dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/examples/react-integration/npm-minor-and-patch-4dbc812198
branch
from
October 25, 2026 20:23
c0a09b4 to
2680c10
Compare
mytrashcan
deleted the
dependabot/npm_and_yarn/examples/react-integration/npm-minor-and-patch-4dbc812198
branch
October 27, 2026 01:36
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-and-patch group with 3 updates in the /examples/react-integration directory: react, react-dom and vite.
Updates
reactfrom 19.3.0 to 19.3.1Release notes
Sourced from react's releases.
Commits
61aa00d[19.3.x][Flight] Improve transport protocol (#37845)Updates
react-domfrom 19.3.0 to 19.3.1Release notes
Sourced from react-dom's releases.
Commits
61aa00d[19.3.x][Flight] Improve transport protocol (#37845)Updates
vitefrom 8.3.3 to 8.3.5Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
981f07frelease: v8.3.5 (#23856)0d86b34fix(resolve): support subpath imports with multiple#(#23631)6a02780perf(ssr): extract inline source maps without a regexp (#23775)8e890e1fix(optimizer): skip patches dir check for yarn.lock fallback (#23725)197daf6fix(bundled-dev): declare utf-8 charset in fallback page (#23846)4d16e7cfix(build): include preload dependencies to chunk import map hashing (#23793)df7b40erefactor(dev): consolidate moduleURL to file path utilities (#23828)a162990refactor(dev): use ModuleURLs throughout HTML transforms (#23815)6116689refactor(dev): separate import resolution from URL conversion (#23791)446954crefactor(dev): share ModuleURL and BrowserURL conversions (#23790)