Skip to content

Upgrade dependencies#45

Merged
CharlesFarris merged 1 commit into
mainfrom
ugprade-dependencies
May 23, 2026
Merged

Upgrade dependencies#45
CharlesFarris merged 1 commit into
mainfrom
ugprade-dependencies

Conversation

@CharlesFarris

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI review requested due to automatic review settings May 23, 2026 03:34
@CharlesFarris CharlesFarris self-assigned this May 23, 2026
@socket-security

socket-security Bot commented May 23, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updateddate-fns@​4.1.0 ⏵ 4.3.088 -910092 +189 +1100
Updatedhono@​4.12.19 ⏵ 4.12.229910097 +196 +1100

View full report

@socket-security

socket-security Bot commented May 23, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

  • date-fns@4.3.0

View full report

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades runtime dependencies for the Bun-based todo app and updates the lockfile resolutions accordingly.

Changes:

  • Bumps date-fns from ^4.1.0 to ^4.3.0.
  • Bumps hono from ^4.12.19 to ^4.12.22.
  • Updates corresponding package resolution entries in bun.lock.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates declared dependency ranges for date-fns and hono.
bun.lock Updates resolved package entries for the upgraded dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@CharlesFarris

Copy link
Copy Markdown
Contributor Author

@SocketSecurity ignore npm/date-fns@4.3.0

@CharlesFarris CharlesFarris merged commit be6e4d4 into main May 23, 2026
4 checks passed
@CharlesFarris CharlesFarris deleted the ugprade-dependencies branch May 23, 2026 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants