Skip to content

Downgrade @oddbird/popover-polyfill to ^0.5.2 - #4133

Merged
jonrohan merged 1 commit into
mainfrom
jonrohan-downgrade-popover-polyfill
Jul 2, 2026
Merged

Downgrade @oddbird/popover-polyfill to ^0.5.2#4133
jonrohan merged 1 commit into
mainfrom
jonrohan-downgrade-popover-polyfill

Conversation

@jonrohan

@jonrohan jonrohan commented Jul 2, 2026

Copy link
Copy Markdown
Member

What are you trying to accomplish?

Downgrade @oddbird/popover-polyfill from ^0.7.0 to ^0.5.2 and add a Dependabot ignore entry so it won't get bumped again.

Integration

  • package.json pins the polyfill to ^0.5.2, package-lock.json resolves to 0.5.2.
  • .github/dependabot.yml ignores @oddbird/popover-polyfill in the root npm ecosystem.

List the issues that this change affects.

Closes # (type the GitHub issue number after #)

Risk Assessment

  • Low risk the change is small, highly observable, and easily rolled back.
  • Medium risk changes that are isolated, reduced in scope or could impact few users. The change will not impact library availability.
  • High risk changes are those that could impact customers and SLOs, low or no test coverage, low observability, or slow to rollback.

What approach did you choose and why?

Version bump plus a Dependabot ignore. Pinning through the config keeps future automated PRs from re-upgrading it.

Anything you want to highlight for special attention from reviewers?

The ignore entry lives under the root npm block, so the /demo npm config is unaffected.

Downgrade the polyfill and add a Dependabot ignore entry so it won't get
bumped again.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@changeset-bot

changeset-bot Bot commented Jul 2, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: f489167

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@primer/view-components Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@jonrohan
jonrohan marked this pull request as ready for review July 2, 2026 03:00
@jonrohan
jonrohan requested a review from a team as a code owner July 2, 2026 03:00
@jonrohan
jonrohan requested review from Copilot and llastflowers and removed request for Copilot July 2, 2026 03:00
@jonrohan
jonrohan merged commit 0098814 into main Jul 2, 2026
34 of 35 checks passed
@jonrohan
jonrohan deleted the jonrohan-downgrade-popover-polyfill branch July 2, 2026 03:00
@primer primer Bot mentioned this pull request Jul 2, 2026
myabc added a commit to opf/primer_view_components that referenced this pull request Jul 21, 2026
Merges primer/view_components through the release-tracking batch
ending at 0098814 (v0.53.0), bringing in three dependabot bumps:

- Bump view_component from 4.9.0 to 4.12.0 (primer#4119)
- Bump @primer/css from 22.1.1 to 22.3.0 (primer#4126)
- Downgrade @oddbird/popover-polyfill to ^0.5.2 (primer#4133)

Resolves the package.json rename/version conflict in favor of the
fork's identity and keeps the fork's newer @primer/primitives and
@primer/stylelint-config pins. Regenerates Gemfile.lock,
package-lock.json, static assets, and docs via script/setup on a
clean tree.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant