Skip to content

chore(deps): bump @contentstack/shopify-live-preview-sdk to ^1.1.3 (VP-2128)#18

Closed
kirtesh-cstk wants to merge 1 commit into
mainfrom
chore/vp-2128-bump-shopify-lp-sdk
Closed

chore(deps): bump @contentstack/shopify-live-preview-sdk to ^1.1.3 (VP-2128)#18
kirtesh-cstk wants to merge 1 commit into
mainfrom
chore/vp-2128-bump-shopify-lp-sdk

Conversation

@kirtesh-cstk

Copy link
Copy Markdown

What

Single patch bump of an internal @contentstack/* dependency. Part of VP-2119 internal package audit — sub-task VP-2128.

File Package Before After
package.json @contentstack/shopify-live-preview-sdk ^1.1.2 ^1.1.3

shopify-live-preview-sdk is published to public npm; npm ls confirms it resolves to 1.1.3.

Verification

  • npm install — lockfile updated.
  • npm run build (tsc) — passes.
  • npm test (jest) — 15/15 passing.

🤖 Generated with Claude Code

…P-2128)

Patch bump (^1.1.2 -> ^1.1.3). Build (tsc) and tests pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@kirtesh-cstk kirtesh-cstk requested a review from a team as a code owner June 16, 2026 12:29
@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type Count (with fixes) Without fixes Threshold Result
🔴 Critical Severity 0 0 10 ✅ Passed
🟠 High Severity 0 0 25 ✅ Passed
🟡 Medium Severity 1 0 500 ✅ Passed
🔵 Low Severity 0 0 1000 ✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity Breaches (with fixes) Breaches (no fixes) SLA Threshold (with/no fixes) Status
🔴 Critical 0 0 15 / 30 days ✅ Passed
🟠 High 0 0 30 / 120 days ✅ Passed
🟡 Medium 0 0 90 / 365 days ✅ Passed
🔵 Low 0 0 180 / 365 days ✅ Passed

✅ BUILD PASSED - All security checks passed

@contentstackMridul contentstackMridul left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change is not required right now; the Shopify SDK already points to 1.1.3 in the package-lock file.
Also, FYI: we cannot merge the change to main, as merging to main would be releasing the change directly

If you think this change is necessory right now, let me know

@kirtesh-cstk

Copy link
Copy Markdown
Author

Closing it as it is already on correct version in package-lock

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants