chore(deps): cover the second ip-address parent - #4638
Conversation
|
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
## Summary `find-my-way` was resolving `9.3.0` even though its only parent, `fastify@5.8.5`, declares `^9.0.0` and so already permitted a newer release. The lockfile had not re-resolved since. This adds a floor so it lands on a current 9.x: ```json "find-my-way@>=9 <9.7.0": "^9.7.0" ``` It resolves to `9.7.0`. Nothing outside the 9.x line is touched, and no parent is asked to accept anything its declared range did not already allow. The whole path is development only: `find-my-way` arrives through `fastify`, which arrives through `evalite`, a devDependency of `apps/webapp` used by the `eval:dev` harness. Stacked on #4638.
2 participants
Summary
The existing
ip-addressoverride is scoped to a single parent,@jsonhero/json-infer-types>ip-address. A second parent reachesip-addressindependently:express-rate-limit@8.6.0, which is itself pinned by our@modelcontextprotocol/sdk@>=1.26.0>express-rate-limitoverride. That path was resolving10.2.0while the scoped path resolved10.5.0, so the tree carried two copies.This adds a matching scoped override for the second parent:
express-rate-limitdeclares^10.2.0, so this asks nothing of it that its own range did not already allow. The tree now resolves a singleip-address@10.5.0.The existing
@jsonhero/json-infer-typesoverride stays: that package declaresip-address: ^8.1.0, so removing it brings an 8.x copy back.Stacked on #4637.